+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [0-Day] CVE-2022-41040 & 41082 - Exchange server (/showthread.php?tid=6222937)
CVE-2022-41040 & 41082 - Exchange server - Bastille - Oct 2, 2022
New 0-day discovered on Exchange server 2013, 2016 and 2019.
The following article by Microsoft provides a mitigation for this, waiting for an update.
https://www.microsoft.com/security/blog/2022/09/30/analyzing-attacks-using-the-exchange-vulnerabilities-cve-2022-41040-and-cve-2022-41082/
RE: CVE-2022-41040 & 41082 - Exchange server - Bastille - Oct 9, 2022
The mitigation proposed by Microsoft can be bypassed, here is an update for new mitigation measures :
https://www.darkreading.com/remote-workforce/microsoft-updates-mitigation-for-exchange-server-zero-days