Exploit for #VU51170 Input validation error in Microsoft Exchange Server

Vulnerability identifier: #VU51170

Vulnerability risk: Critical

CVSSv4.0: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Red]

CVE-ID: CVE-2021-26857

CWE-ID: CWE-20

Exploitation vector: Network

Exploits in database: 3

• April 1, 2021
  • exprolog (ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)) [Github]
• March 18, 2021
  • ProxyLogon (Chaining CVE-2021-26855 and CVE-2021-26857 to exploit Microsoft Exchange) [Github]
• March 12, 2021
  • Proxylogon-exploit (proxylogon exploit - CVE-2021-26857) [Github]

Vulnerable software:
Microsoft Exchange Server
Server applications / Mail servers

Vendor: Microsoft