Microsoft is investigating two reported zero-day vulnerabilities affecting Microsoft Exchange Server 2013, Exchange Server 2016, and Exchange Server 2019. More information is in the Mitigations section.

Microsoft released the Exchange Emergency Mitigation Service (EEMS) mitigation for this issue.

Microsoft created a script for the URL Rewrite mitigation steps and modified step 6 in the Mitigations section.

Added link to Microsoft Security blog in Summary.

Updated Detection section to refer to Analyzing attacks using the Exchange vulnerabilities CVE-2022-41040 and CVE-2022-41082.

Guidance on how to do this for single user or multiple users is here.

Added to the Mitigations section: we strongly recommend Exchange Server customers disable remote PowerShell access for non-admin users in your organization.

The string in step 6 and step 9 has been revised. Option 3: The URL Rewrite rule instructions have been updated.Option 2: The previously provided EOMTv2 script has been updated to include the URL Rewrite improvement.Option 1: The EEMS rule is updated and is automatically applied.Customers should review and use one of these options: Important updates have been made to the Mitigations section improving the URL Rewrite rule. Option 3: The instructions and image in step 10 are updated for a Condition input change.Īdded under Mitigations section that Exchange Server customers should complete both recommended mitigations.Option 1: The mitigation for EEMS rule has been updated and the updates will be applied automatically.Steps 8, 9, and 10 have updated images.Īn updated version released for EOMTv2 to remove an extra space in the script that didn’t impact functionality. Option 3: The string in step 6 and step 9 has been revised.Option 2: The mitigation for EOMTv2 has been updated.Option 1: The mitigation for EEMS has been updated and the updates will be applied automatically.

Steps 8, 9, and 10 have updated images.įurther improvement has been made to the URL Rewrite rule mitigation. A correction was made to the string in step 6 and step 9 in the URL Rewrite rule mitigation Option 3.

Eset endpoint security version 5