Vulnerability threat dossier
Microsoft Exchange Server Remote Code Execution Vulnerability
VTP analyst assessment
This network-reachable Exchange Server remote-code-execution vulnerability is listed in CISA KEV and associated there with known ransomware campaign use.
0 record references and 2 source references passed trusted post-response validation. The current deterministic record contains 0 independent evidence groups.
No exploit artifact, exploitation-chain detail, or first-party observation is supplied.
Actual affected-server exposure is unknown.
First-party honeypot request semantics are potentially consistent with this CVE. This is an unconfirmed candidate match, not proof of exploitation or successful execution.
Track the listed vulnerable Exchange 2013 and 2016 cumulative updates.
First-party deterministic correlation
The request shares exploitation-associated characteristics with CVE-2021-34473, but the evidence does not identify one CVE with sufficient confidence.
Basis: deterministic technical candidate
VTP deterministic assessment
CISA KEV lists this vulnerability as known to be exploited globally.
EPSS is 1.00; this is predictive context, not exploitation evidence.
Exploitation attempts against this CVE were confirmed by first-party telemetry.
First-party honeypot request semantics are potentially consistent with this CVE. This is an unconfirmed candidate match, not proof of exploitation or successful execution.
Material change ledger
Claim provenance
0 primary sources · 0 dependent secondary reports · 0 reports with unresolved independence. Repetition remains visible without multiplying confirmation.
Event history
CISA lists global known exploitation. This is not a VTP sensor observation.
Original publications
Technical vulnerability data
Raw observations
First-party honeypot request semantics are potentially consistent with this CVE. This is an unconfirmed candidate match, not proof of exploitation or successful execution.