Demonstrating CVE-2020-0688: A Remote Code Execution Bug in Microsoft Exchange
Channel: Zero Day Initiative
Date: 2020-02-25

This video demonstrates how an authenticated user could remotely take over an affected Microsoft Exchange Server. The vulnerability results from Exchange Server failing to properly create unique cryptographic keys at the time of installation. Microsoft patched this in February 2020 and assigned it CVE-2020-0688.