PRIVATE_FEEDS/CVE_VULN_FEED/CVE-2021-26855-VULNSCAN-ms_exchange_rce/alert_text.md

Date: 2021-03-09

please find attached a list of vulnerable servers for the latest Exchange-RCE (CVE-2021-26855 ProxyLogon)

Scandate: 2021-03-09 14:00 UTC

Based on current developments, you should consider each system compromised

CVE : CVE-2021-26855

Patches : available Exploits : available and executed

we found various IPs in your ORG/ASN, matching criteria for possible vulnerable systems

False-Positive-Level: no

please find a list of affected IPs below and more information on that problem here:

References and DFIR-Ressources:

• https://zero.bs/sb-2107-emergency-patches-for-ms-exchange-hafnium-targeting-exchange-servers-with-0-day-exploits-cve-2021-26855.html#references