CVE-2021-31196
Microsoft Exchange Server 2013 … 2019
Raw vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2021-31196 is a high-severity an unspecified weakness vulnerability in Microsoft Exchange Server. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 1% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
Microsoft Exchange Server is affected by a remote code execution vulnerability tracked as CVE-2021-31196. The flaw carries a CVSS 3.1 base score of 7.2 with network attack vector, low attack complexity, and high privileges required, resulting in high impact to confidentiality, integrity, and availability.
An authenticated attacker with high privileges can exploit the issue over the network to execute arbitrary code on the Exchange server, achieving full control of the affected system without user interaction.
Microsoft has published remediation guidance in its Security Response Center advisory, and the vulnerability appears in CISA's catalog of known exploited vulnerabilities, indicating confirmed in-the-wild exploitation.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-18109
Vulnerability Data
Microsoft Exchange Server Remote Code Execution Vulnerability
- CWE(s)
- KEV Date Added
- 21 August 2024
Related Threats
Threat-Actor AttributionAI
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.