VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 11, 2020· Updated Aug 4, 2024

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2020-16875

Description

A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. Exploitation of the vulnerability requires an authenticated user in a certain Exchange role to be compromised. The security update addresses the vulnerability by correcting how Microsoft Exchange handles cmdlet arguments.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Microsoft/Exchange Serverv55 versions
    cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*range: 15.01.0
    • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*range: 15.01.0
    • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*range: 15.02.0
    • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*range: 15.02.0
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.