{"id":15582,"date":"2023-01-09T08:16:33","date_gmt":"2023-01-09T07:16:33","guid":{"rendered":"https:\/\/news.save.ch\/?p=15582"},"modified":"2023-06-10T12:27:38","modified_gmt":"2023-06-10T10:27:38","slug":"viele-exchange-server-noch-immer-nicht-gepatcht","status":null,"type":"post","link":"https:\/\/news.save.ch\/en\/viele-exchange-server-noch-immer-nicht-gepatcht\/","title":{"rendered":"Many Exchange servers still not patched"},"content":{"rendered":"
\"Many
Image: depositphotos<\/figcaption><\/figure>\n

At the end of December 2022, security researchers from the Shadowserver Foundation scanned the Internet and came up with a Message on Twitter<\/a> According to the report, a total of around 70,000 vulnerable Microsoft Exchange servers have been found. The figures show that just under 30,000 servers in Europe are affected. Admins should therefore ensure that the latest security updates are installed.<\/p>\n

Otherwise, there is still a risk that some major vulnerabilities will continue to be exploited. In case of successful attacks, attackers can usually exploit the malicious code and cause a complete compromise of systems. At the end of September 2022, Microsoft also failed to release an important security update in a reasonable amount of time.<\/p>\n

Security patches should be applied quickly<\/h3>\n

The National Cyber Security Center (NCSC) was also last aware (as of November 2022) of more than 2800 vulnerable Exchange servers in Switzerland that had a vulnerability called ProxyNotShell. Attackers could exploit the vulnerability to execute code remotely (\"Remote Code Execution Vulnerability\" - RCE).<\/p>\n

NCSC Recommendations:<\/p>\n

Admins of Exchange servers should make sure to apply all the latest patches from Microsoft Exchange:<\/p>\n