Back to the CVE list
CVE-2021-34473 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS score

9.1

EPSS probability

%100.0

Risk score

18.2

Published

5 y ago

OverviewPublic Exploits (9)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

N
projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34473.yaml
Nuclei

Nuclei: Exchange Server - Remote Code Execution

Exploit reference
N
http://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html
NVD reference

http://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html

Exploit reference
G
horizon3ai/proxyshell
GitHub

Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207

Public PoC
G
hosch3n/ProxyVulns
GitHub

[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021-34473 & CVE-2021-34523 & CVE-2021-31207 Exploit Chains.

Public PoC
G
ipsBruno/CVE-2021-34473-NMAP-SCANNER
GitHub

A massive scanner for CVE-2021-34473 Microsoft Exchange Windows Vulnerability

Public PoC
G
je6k/CVE-2021-34473-Exchange-ProxyShell
GitHub

对Exchange Proxyshell 做了二次修改，精确的拆分、实现辅助性安全测试。

Public PoC
G
kh4sh3i/ProxyShell
GitHub

CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability

Public PoC
G
learningsurface/ProxyShell-CVE-2021-34473.py
GitHub

A simple script to check for ProxyShell

Public PoC
G
mithridates1313/ProxyShell_POC
GitHub

POC for scanning ProxyShell(CVE-2021-34523,CVE-2021-34473,CVE-2021-31207)

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-34473"