CVE-2019-1373: Critical severity microsoft exchange server vulnerability
Published Nov 12, 2019
·Updated
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
Affected Software
5 affected components
Microsoft Exchange Server=2013-cumulative_update_23
Microsoft Exchange Server=2016-cumulative_update_13
Microsoft Exchange Server=2016-cumulative_update_14
Microsoft Exchange Server=2019-cumulative_update_2
Microsoft Exchange Server=2019-cumulative_update_3
Remediation
Event History
Nov 12, 2019
CVE Published
via MITRE·06:52 PM
Data Sourced
via MITRE·06:52 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-1373?
CVE-2019-1373 has a CVSS score of 9.8, indicating a critical severity vulnerability.
2
How do I fix CVE-2019-1373?
To fix CVE-2019-1373, install the latest cumulative updates for Microsoft Exchange Server 2013, 2016, or 2019.
3
What versions of Microsoft Exchange are affected by CVE-2019-1373?
CVE-2019-1373 affects Microsoft Exchange Server 2013 (CU23), 2016 (CU13 and CU14), and 2019 (CU2 and CU3).
4
Can CVE-2019-1373 be exploited remotely?
Yes, CVE-2019-1373 is a remote code execution vulnerability, which can be exploited over the network.
5
What kind of attack does CVE-2019-1373 facilitate?
CVE-2019-1373 facilitates remote code execution attacks through the deserialization of metadata via PowerShell.