CVE-2023-21529

Published Feb 14, 2023

Last updated 2 months ago

Exploit known CVSS high 8.8

web application

Cloud

Zero-day

API

IoT

Server

Overview

AI description

Automated description summarized from trusted sources.

CVE-2023-21529 is a remote code execution vulnerability affecting Microsoft Exchange Server. This flaw, categorized as an insecure deserialization issue (CWE-502), allows authenticated attackers with network access to execute arbitrary code on vulnerable Exchange Server installations. The vulnerability stems from the improper handling of serialized objects, which can be exploited through specially crafted requests. This means an attacker who has successfully authenticated to the Exchange server can leverage this weakness to compromise the system.

Description: Microsoft Exchange Server Remote Code Execution Vulnerability
Source: secure@microsoft.com
NVD status: Analyzed
Products: exchange_server

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Exploit added on: Apr 13, 2026
Exploit action due: Apr 27, 2026
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@microsoft.com: CWE-502

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId": "DA166F2A-D83B-4D50-AD0B-668D813E0585",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId": "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId": "435343A4-BF10-461A-ABF2-D511A5FBDA75",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId": "B23C8E3E-5243-4DA6-B9AA-F6053084B55E",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.