IT Solutions - Jul 15, 2021

Microsoft Exchange Server – Critical vulnerabilities patched.

Participants in the 2021 Pwn2Own hacking contest have identified previously unknown vulnerabilities in Microsoft Exchange Server, including remote code execution, privilege escalation, and information disclosure flaws. Microsoft has already published security updates to resolve these issues.

The vulnerabilities affect Microsoft Exchange Server 2013 and up. Older versions of Microsoft Exchange Server are likely also impaired, but this is as yet unconfirmed. The vulnerabilities have been evaluated to be critical A NIST evaluation of the flaws is outstanding.

The newly identified vulnerabilities CVE-2021-33766, CVE-2021-34473 and CVE-2021-34523 had already been fixed via the security update published in April 2021.

The other newly identified vulnerabilities CVE-2021-31196, CVE-2021-31206, CVE-2021-33768 and CVE-2021-34470 can be fixed via the security update published by Microsoft on 13 July 2021.

Version	CVE	Link
Microsoft Exchange Server 2019 Cumulative Update 10	CVE-2021-31196 CVE-2021-31206 CVE-2021-33768	microsoft.com
Microsoft Exchange Server 2019 Cumulative Update 10	CVE-2021-34470	microsoft.com
Microsoft Exchange Server 2019 Cumulative Update 9	CVE-2021-31196 CVE-2021-31206 CVE-2021-33768	microsoft.com
Microsoft Exchange Server 2019 Cumulative Update 9	CVE-2021-33766 CVE-2021-34473 CVE-2021-34523	microsoft.com
Microsoft Exchange Server 2019 Cumulative Update 8	CVE-2021-33766 CVE-2021-34473 CVE-2021-34523	microsoft.com
Microsoft Exchange Server 2016 Cumulative Update 21	CVE-2021-31196 CVE-2021-31206 CVE-2021-33768	microsoft.com
Microsoft Exchange Server 2016 Cumulative Update 21	CVE-2021-34470	microsoft.com
Microsoft Exchange Server 2016 Cumulative Update 20	CVE-2021-31196 CVE-2021-31206 CVE-2021-33768	microsoft.com
Microsoft Exchange Server 2016 Cumulative Update 20	CVE-2021-33766 CVE-2021-34473 CVE-2021-34523	microsoft.com
Microsoft Exchange Server 2016 Cumulative Update 19	CVE-2021-33766 CVE-2021-34473 CVE-2021-34523	microsoft.com
Microsoft Exchange Server 2013 Cumulative Update 23	CVE-2021-31196 CVE-2021-31206 CVE-2021-34470	microsoft.com
Microsoft Exchange Server 2013 Cumulative Update 23	CVE-2021-33766 CVE-2021-34473 CVE-2021-34523	microsoft.com

We recommend deploying these security updates as soon as possible. Whether these vulnerabilities can be traced to the Hafnium hacker group is not currently known.

We are happy to help you with an external assessment of your systems. Should you require assistance or advice, please contact us at it-security@bechtle.com or speak with your Bechtle account manager.

Share this page

This post was published on Jul 15, 2021.

Blog

Tree-planting projects and what to look out for

Many businesses and private individuals are doing their bit for climate protection by taking part in projects to plant trees, but unfortunately, it’s not as easy as just digging a hole.

User adoption and change management

Modern Workplace from Bechtle AG® ➥ An overview of user adoption ✓ Success factors for change management ✓ Click & order!

Blog

The modern workplace – Four questions to keep companies busy in 2023

What are the current modern workplace trends and what does the workplace of the future look like? What are the the biggest questions facing businesses this new year?

Promotion

Towards a diverse digital future – With Cisco

Digitalisation is changing the way people live and work. Experience the digital standard of tomorrow with Cisco. Find out more!

Sustainability

For Bechtle, sustainability is synonymous with surviving. Ambitious goals, embedded in a clear vision, have always been the driving force behind what we do. Learn more about sustainability at Bechtle.

Blog

The team in focus – Accomplished agile working

Agile working, hybrid or virtual teams and modern leadership are shaping our workplace.

Blog

Modern Work – The roadmap to success

Smart, hybrid and optimally adapted to the user's situation – this is how Dennis Stolze, Team Leader Cognitive Environments, Fraunhofer IAO, sees the future of work.

Florian Vees

Florian Vees is a junior consultant at Bechtle in Stuttgart, working on Office 365, Modern Workplace and Collaboration. He is certain: "Solutions from Microsoft and its partners are the ideal way to implement the future of collaboration.

Blog

The workplace of the future. Four Modern Workplace trends.

Four topics for 2023 that businesses and organisations need to bear in mind when thinking about their modern worlds of work.

Digital Advisory - Your first step towards a digital strategy.

Veronika Reithofer

The internet is becoming increasingly fast-paced. It is essential to be the fastest to publish and reach users in way that is suitable for the respective target groups. This blog gives us the opportunity to keep the members of our community up-to-date as quickly and comprehensively as possible.

Customer story

GRIMME GmbH – No small potatoes: GRIMME leverages Microsoft 365 to connect its teams

Supported by Bechtle, GRIMME updated their workstations with Microsoft 365, enabling users to leverage new technology for maximum impact.

Blog

How sustainability influences consumer behaviour

Where do we stand in terms of sustainability? What are people’s attitude towards it? And how and what do we consume? Utopia.de—Germany’s largest online platform on the topic—has asked.

Promotion

Modern Digital Workplace ▷ End of support for Windows 7 | Bechtle

Modern Digital Workplace from Bechtle ➥ End of support for Windows 7 ✓ Make the switch to Windows 10 ✓ Our experts are by your side ✓ Find out more!

Blog

Bechtle spices up Südwestdeutsche Salzwerke AG’s workplace

Collaborating with Bechtle, the Heilbronn-based company has rolled out a holistic modern work concept to the benefit of the some 1,000 employees—even those above ground.

Blog

360° Microsoft – From Teams and Viva to security

The Microsoft world revolves around Teams, Viva and IT security. The tech giant based in Redmond publishes so many updates that users can’t always keep up with developments. In this blog, I’ll show you what’s new in MS Teams, Viva and MS 365 Defender solutions.

Sustainability | Taking responsibility

ARTICONA | Taking responsibility | We are continuously optimising our products and services for a more sustainable future. Find out more!

Customer story

rhenag Rheinische Energie AG - Remote collaboration with Microsoft Teams

As part of the country’s critical infrastructure, rhenag chose Bechtle to connect employees to the cloud through Microsoft Azure. Microsoft Teams now allows employees to collaborate remotely.

Go paperless | Digital Office with Bechtle AG®

Modern Workplace with Bechtle AG® ➥ The advantages of the digital office ✓ Tips and tricks transitioning to a paperless office ✓ Find out now!

Customer story

Weilburger Coatings – An IT Director’s journey to creating a smart workplace

WEILBURGER’s innovative power of coating products now has its very own IT thanks to Bechtle. With a transparent move to Microsoft 365, the company uses parts of the system for modern workplace—making them an attractive employer.

Michael Hufelschulte

Michael Hufelschulte works as an innovation manager at Bechtle, where he focuses on the methodical invention of digital business models. For 20 years he gained experience in the telecommunications industry, among other things as product manager eCommerce and press officer for digital topics and social media. He then spent 5 years in consulting, focusing on digital disruption and how it can be addressed by organisations using innovation methods such as Design Sprint and LEGO® Serious Play®.

Microsoft Surface and sustainability

Microsoft Surface and sustainability – Laptops, 2-in-1s and Studio devices are already ENERGY STAR®-certified and help protect the environment.

First Steps Change Management

Successfully introducing new technologies requires users to change their behavior. And change can be hard. It's more than just learning how to use it. It's a fundamentally different way of working. This change is about people. We help you manage the people factor in your IT project.