{"id":6535,"date":"2023-11-15T22:07:31","date_gmt":"2023-11-16T04:07:31","guid":{"rendered":"https:\/\/josea112.sg-host.com\/publicacion\/alert-2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/"},"modified":"2024-10-22T09:58:20","modified_gmt":"2024-10-22T14:58:20","slug":"2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/","title":{"rendered":"Alert 2023-07 &#8211; Public PoC for Microsoft Exchange Server Critical RCE Vulnerability"},"content":{"rendered":"<p style=\"font-weight: 400;\">A critical vulnerability has been reported affecting Microsoft Exchange Server Mail Server named CVE-2023-36745 rated High with a CVSS score of 8.0, which may allow remote attackers to execute remote code (RCE).<\/p>\n<p style=\"font-weight: 400;\">This vulnerability is exploited by leveraging the Microsoft.Exchange.DxStore.Common.DxSerializationUtil.SharedTypeResolver class to bypass the default security restrictions of the .NET Framework. This class can be used to load assemblies from remote locations, which subsequently allows arbitrary code execution on the victim&#8217;s system.<\/p>\n<p style=\"font-weight: 400;\">An attacker could exploit the vulnerability by leveraging the gadget (Type 4) UnitySerializationHolder by deserializing untrusted data. Exploitation of this vulnerability requires the attacker to gain access to the LAN and obtain credentials for a valid Exchange user. <\/p>\n<p style=\"font-weight: 400;\">A Proof of Concept (PoC) exploit for Microsoft Exchange Server vulnerability CVE-2023-36745 has been published, it is recommended to take immediate corrective action.<\/p>\n","protected":false},"featured_media":5710,"template":"","class_list":["post-6535","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"A critical vulnerability has been reported affecting Microsoft Exchange Server Mail Server named CVE-2023-36745 rated High with a CVSS score of 8.0, which may allow remote attackers to execute remote code (RCE). This vulnerability is exploited by leveraging the Microsoft.Exchange.DxStore.Common.DxSerializationUtil.SharedTypeResolver class to bypass the default security restrictions of the .NET Framework. This class can be\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alert 2023-07 \u2013 Public PoC for Microsoft Exchange Server Critical RCE Vulnerability - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"A critical vulnerability has been reported affecting Microsoft Exchange Server Mail Server named CVE-2023-36745 rated High with a CVSS score of 8.0, which may allow remote attackers to execute remote code (RCE). This vulnerability is exploited by leveraging the Microsoft.Exchange.DxStore.Common.DxSerializationUtil.SharedTypeResolver class to bypass the default security restrictions of the .NET Framework. This class can be\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2023\/12\/images.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2023\/12\/images.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"284\" \/>\n\t\t<meta property=\"og:image:height\" content=\"177\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-11-16T04:07:31+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-10-22T14:58:20+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alert 2023-07 \u2013 Public PoC for Microsoft Exchange Server Critical RCE Vulnerability - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"A critical vulnerability has been reported affecting Microsoft Exchange Server Mail Server named CVE-2023-36745 rated High with a CVSS score of 8.0, which may allow remote attackers to execute remote code (RCE). This vulnerability is exploited by leveraging the Microsoft.Exchange.DxStore.Common.DxSerializationUtil.SharedTypeResolver class to bypass the default security restrictions of the .NET Framework. This class can be\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2023\/12\/images.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/#listItem\",\"name\":\"Alert 2023-07 &#8211; Public PoC for Microsoft Exchange Server Critical RCE Vulnerability\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/#listItem\",\"position\":2,\"name\":\"Alert 2023-07 &#8211; Public PoC for Microsoft Exchange Server Critical RCE Vulnerability\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/\",\"name\":\"Alert 2023-07 \\u2013 Public PoC for Microsoft Exchange Server Critical RCE Vulnerability - Beacon Lab\",\"description\":\"A critical vulnerability has been reported affecting Microsoft Exchange Server Mail Server named CVE-2023-36745 rated High with a CVSS score of 8.0, which may allow remote attackers to execute remote code (RCE). This vulnerability is exploited by leveraging the Microsoft.Exchange.DxStore.Common.DxSerializationUtil.SharedTypeResolver class to bypass the default security restrictions of the .NET Framework. This class can be\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/images.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/#mainImage\",\"width\":284,\"height\":177,\"caption\":\"Microsoft Exchange Server\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\\\/#mainImage\"},\"datePublished\":\"2023-11-15T22:07:31-06:00\",\"dateModified\":\"2024-10-22T09:58:20-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alert 2023-07 \u2013 Public PoC for Microsoft Exchange Server Critical RCE Vulnerability - Beacon Lab","description":"A critical vulnerability has been reported affecting Microsoft Exchange Server Mail Server named CVE-2023-36745 rated High with a CVSS score of 8.0, which may allow remote attackers to execute remote code (RCE). This vulnerability is exploited by leveraging the Microsoft.Exchange.DxStore.Common.DxSerializationUtil.SharedTypeResolver class to bypass the default security restrictions of the .NET Framework. This class can be","canonical_url":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/#listItem","name":"Alert 2023-07 &#8211; Public PoC for Microsoft Exchange Server Critical RCE Vulnerability"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/#listItem","position":2,"name":"Alert 2023-07 &#8211; Public PoC for Microsoft Exchange Server Critical RCE Vulnerability","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/en\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/en\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/#webpage","url":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/","name":"Alert 2023-07 \u2013 Public PoC for Microsoft Exchange Server Critical RCE Vulnerability - Beacon Lab","description":"A critical vulnerability has been reported affecting Microsoft Exchange Server Mail Server named CVE-2023-36745 rated High with a CVSS score of 8.0, which may allow remote attackers to execute remote code (RCE). This vulnerability is exploited by leveraging the Microsoft.Exchange.DxStore.Common.DxSerializationUtil.SharedTypeResolver class to bypass the default security restrictions of the .NET Framework. This class can be","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/beaconlab.us\/en\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2023\/12\/images.png","@id":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/#mainImage","width":284,"height":177,"caption":"Microsoft Exchange Server"},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/#mainImage"},"datePublished":"2023-11-15T22:07:31-06:00","dateModified":"2024-10-22T09:58:20-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/en\/#website","url":"https:\/\/beaconlab.us\/en\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"en-US","publisher":{"@id":"https:\/\/beaconlab.us\/en\/#organization"}}]},"og:locale":"en_US","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alert 2023-07 \u2013 Public PoC for Microsoft Exchange Server Critical RCE Vulnerability - Beacon Lab","og:description":"A critical vulnerability has been reported affecting Microsoft Exchange Server Mail Server named CVE-2023-36745 rated High with a CVSS score of 8.0, which may allow remote attackers to execute remote code (RCE). This vulnerability is exploited by leveraging the Microsoft.Exchange.DxStore.Common.DxSerializationUtil.SharedTypeResolver class to bypass the default security restrictions of the .NET Framework. This class can be","og:url":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2023\/12\/images.png","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2023\/12\/images.png","og:image:width":284,"og:image:height":177,"article:published_time":"2023-11-16T04:07:31+00:00","article:modified_time":"2024-10-22T14:58:20+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alert 2023-07 \u2013 Public PoC for Microsoft Exchange Server Critical RCE Vulnerability - Beacon Lab","twitter:description":"A critical vulnerability has been reported affecting Microsoft Exchange Server Mail Server named CVE-2023-36745 rated High with a CVSS score of 8.0, which may allow remote attackers to execute remote code (RCE). This vulnerability is exploited by leveraging the Microsoft.Exchange.DxStore.Common.DxSerializationUtil.SharedTypeResolver class to bypass the default security restrictions of the .NET Framework. This class can be","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2023\/12\/images.png"},"aioseo_meta_data":{"post_id":"6535","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2024-10-17 23:38:54","updated":"2025-09-24 05:53:43","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/en\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlert 2023-07 \u2013 Public PoC for Microsoft Exchange Server Critical RCE Vulnerability\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/en\/"},{"label":"Alert 2023-07 &#8211; Public PoC for Microsoft Exchange Server Critical RCE Vulnerability","link":"https:\/\/beaconlab.us\/en\/publication\/2023-07-public-poc-for-microsoft-exchange-server-critical-rce-vulnerability\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/6535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/6535\/revisions"}],"predecessor-version":[{"id":7751,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/6535\/revisions\/7751"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media\/5710"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media?parent=6535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}