CISA Issues Emergency Directive and Alert on Microsoft Exchange Vulnerabilities
Cybersecurity and Infrastructure Security Agency sent this bulletin at 03/03/2021 04:32 PM EST
You are subscribed to no topic for Cybersecurity and Infrastructure Security Agency. This information has recently been updated, and is now available.
03/03/2021 03:14 PM EST
Original release date: March 3, 2021
CISA has issued Emergency Directive (ED) 21-02 and Alert AA21-062A addressing critical vulnerabilities in Microsoft Exchange products. Successful exploitation of these vulnerabilities allows an attacker to access on-premises Exchange servers, enabling them to gain persistent system access and control of an enterprise network.
CISA strongly recommends organizations examine their systems to detect any malicious activity detailed in Alert AA21-062A. Review the following resources for more information:
- CISA Emergency Directive 21-02: Mitigate Microsoft Exchange On-Premises Product Vulnerabilities
- AA21-062A: Mitigate Microsoft Exchange Server Vulnerabilities
- Microsoft Security Blog Post: Multiple Security Updates Released for Exchange Server
This product is provided subject to this Notification and this Privacy & Use policy.