Microsoft Exchange attack: Temporary solution to patch zero-day flaw can be bypassed

Microsoft recently confirmed that it is aware and now working on patching two zero-day vulnerabilities on Microsoft Exchange server that were used to carry out limited targeted attacks. The company also released the Exchange Emergency Mitigation Service (EEMS) mitigation in order to slow down hackers’ progress in stealing user data, however, security researchers have claimed that the temporary solution used to plug the attacks can be easily bypassed.

What is the vulnerability?

Two zero-day vulnerabilities – CVE-2022-41040, is a Server-Side Request Forgery (SSRF) vulnerability, and the second one, identified as CVE-2022-41082, allows Remote Code Execution (RCE) – were first reported by GTSC.