Skip to content

Microsoft Exchange Server Remote Code Execution Vulnerability - 20240424001

Overview

Microsoft Exchange Server Remote Code Execution Vulnerability

What is vulnerable?

CVE Severity CVSS Product(s) Affected Dated
CVE-2024-26198 Important 7.7 See vendor link in Recommendation 12/03/24 (Updated 23/04/24)

What has been observed?

There is no evidence of exploitation affecting Western Australian Government networks at the time of publishing.

Recommendation

The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframe of one month... (refer Patch Management):

Additional References