Back to the CVE list
CVE-2021-34523 CISA KEV · Actively exploitedLinked to ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS score

9.0

EPSS probability

%100.0

Risk score

18.0

Published

5 y ago

OverviewPublic Exploits (5)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

N
http://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html
NVD reference

http://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html

Exploit reference
G
horizon3ai/proxyshell
GitHub

Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207

Public PoC
G
hosch3n/ProxyVulns
GitHub

[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021-34473 & CVE-2021-34523 & CVE-2021-31207 Exploit Chains.

Public PoC
G
mithridates1313/ProxyShell_POC
GitHub

POC for scanning ProxyShell(CVE-2021-34523,CVE-2021-34473,CVE-2021-31207)

Public PoC
G
SUPRAAA-1337/CVE-2021-34523
GitHub

test-yaml

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-34523"