CVE-2022-41082: Demonstrating RCE in Microsoft Exchange
Channel: Zero Day Initiative
Date: 16/11/2022

#Exchange #ZeroDayInitiative #Exploit
This video demonstrates a remote code execution vulnerability in Microsoft Exchange server. It was originally submitted to the ZDI program by the researcher known as “DA-0x43-Dx4-DA-Hx2-Tx2-TP-S-Q from GTSC”. After successful validation, it was immediately submitted to Microsoft. 

For full details on the vulnerabilities, see the blog at:
https://www.zerodayinitiative.com/blog/2022/11/14/control-your-types-or-get-pwned-remote-code-execution-in-exchange-powershell-backend