Microsoft Exchange Server 2013 Cumulative Update 21 vulnerability

What happened

Microsoft Exchange Server Remote Code Execution Vulnerability

Affected versions

Microsoft Exchange Server 2013 Cumulative Update 21: 15.00.0 through before 15.00.1395.012 (custom); 15.00.0 through before 15.00.1473.006 (custom); 15.00.0 through before 15.00.1497.012 (custom); 15.01.0 through before 15.01.1531.012 (custom); 15.01.0 through before 15.01.1591.018 (custom); 15.01.0 through before 15.01.1713.010 (custom); 15.01.0 through before 15.01.1779.008 (custom); 15.01.0 through before 15.01.1847.012 (custom); 15.01.0 through before 15.01.1913.012 (custom); 15.01.0 through before 15.01.1979.008 (custom); 15.01.0 through before 15.01.2044.013 (custom); 15.01.0 through before 15.01.2106.013 (custom); 15.01.0 through before 15.01.2176.009 (custom); 15.01.0 through before 15.01.1415.010 (custom); 15.01.0 through before 15.01.1466.016 (custom); 15.02.0 through before 15.02.0221.018 (custom); 15.02.0 through before 15.01.1979.006 (custom); 15.02.0 through before 15.02.0397.011 (custom); 15.02.0 through before 15.02.0464.015 (custom); 15.02.0 through before 15.02.0659.012 (custom); 15.02.0 through before 15.02.0595.008 (custom); 15.02.0 through before 15.02.0529.013 (custom); 15.02.0 through before 15.02.0721.013 (custom); 15.02.0 through before 15.02.0792.010 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.