{"id":22387,"date":"2021-12-01T01:46:00","date_gmt":"2021-12-01T00:46:00","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=22387"},"modified":"2021-12-01T01:47:54","modified_gmt":"2021-12-01T00:47:54","slug":"cert-bund-warnung-30-der-deutschen-exchange-server-mit-offenem-owa-angreifbar","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2021\/12\/01\/cert-bund-warnung-30-der-deutschen-exchange-server-mit-offenem-owa-angreifbar\/","title":{"rendered":"German CERT-Bund warns about vulnerable Exchange Server with OWA reachable from Internet"},"content":{"rendered":"

\"Sicherheit[German<\/a>]It seems, that many vulnerable Microsoft Exchange servers are been used to play Russian roulette. German CERT-Bund has alerted a warning. They found about 12,000 Exchange Servers 2013\/2016\/2019, whose OWA is accessible via the Internet and which have at least one unpatched critical vulnerability.<\/p>\n

<\/p>\n

\"\"CERT-Bund has scanned the Internet for Exchange servers whose Open Web Access (OWA) interface is accessible via the Web and checked the patch level of these machines. <\/p>\n

\"CERT-Bund-Warnung<\/a><\/p>\n

Of the Exchange Server 2013, 2016 and 2019 instances known to the CERT Alliance, approximately 12,000 were found to be patched with outdated CUs. Microsoft no longer provides security updates for this outdated cumulative update state (security updates are only ever provided for the two most recent CUs). Thus, the Exchange Server instances are vulnerable to the following Microsoft Exchange Server Remote Code Execution vulnerabilities:<\/p>\n