A bug in MS Exchange allows an unauthenticated attacker to bypass authentication, change mailbox-settings and read emails of its target.
The bug is called "ProxyToken" and details had been published by the ZeroDayInitiative earlier this week.
- ThreatPost: Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping
- TheRecord: ProxyToken vulnerability can modify Exchange server configs
vulnscan - results
SUMMARY for ms_exchange_proxytoken / CVE-2021-33766
IPs : 43096
Networks : 16726
ASNs : 5792
Countries : 203
Top Countries
Country | Count
--------+-----------
US | 10261
DE | 5311
GB | 2834
FR | 2156
RU | 1944
IT | 1738
CA | 1684
CH | 1366
AU | 1141
NL | 974
AT | 774
HK | 667
TW | 545
Top 100 ASNs
ASN_NR | Count | ASNName
----------+--------+-----------------------------------
3320 | 2614 | DTAG Internet service provider operations, DE
7922 | 1268 | COMCAST-7922, US
7018 | 921 | ATT-INTERNET4, US
3209 | 758 | VODANET International IP-Backbone of Vodafone, DE
3303 | 703 | SWISSCOM Swisscom Switzerland Ltd, CH
3215 | 694 | France Telecom - Orange, FR
2856 | 506 | BT-UK-AS BTnet UK Regional network, GB
3269 | 435 | ASN-IBSNAZ, IT
22773 | 429 | ASN-CXA-ALL-CCI-22773-RDC, US
701 | 410 | UUNET, US
3462 | 395 | HINET Data Communication Business Group, TW
20115 | 307 | CHARTER-20115, US
8075 | 281 | MICROSOFT-CORP-MSN-AS-BLOCK, US
209 | 276 | CENTURYLINK-US-LEGACY-QWEST, US
1221 | 259 | ASN-TELSTRA Telstra Corporation Ltd, AU
201429 | 255 | TRANSAVTOLIZ-AS, RU
10796 | 252 | TWC-10796-MIDWEST, US
577 | 247 | BACOM, CA
15557 | 237 | LDCOMNET, FR
5089 | 233 | NTL, GB
6327 | 232 | SHAW, CA
8447 | 223 | A1TELEKOM-AT A1 Telekom Austria AG, AT
5650 | 222 | FRONTIER-FRTR, US
3352 | 218 | TELEFONICA_DE_ESPANA, ES
174 | 197 | COGENT-174, US
9381 | 197 | HKBNES-AS-AP HKBN Enterprise Solutions HK Limited, HK
3549 | 191 | LVLT-3549, US
6128 | 191 | CABLE-NET-1, US
5413 | 180 | AS5413, GB
7029 | 178 | WINDSTREAM, US
7545 | 176 | TPG-INTERNET-AP TPG Telecom Limited, AU
8412 | 176 | TMA Magenta Telekom, AT
24940 | 172 | HETZNER-AS, DE
31655 | 168 | ASN-GAMMATELECOM, GB
852 | 161 | TELUS Communications, CA
30722 | 159 | VODAFONE-IT-ASN, IT
5769 | 149 | VIDEOTRON, CA
6830 | 145 | LIBERTYGLOBAL Liberty Global formerly UPC Broadband Holding, aka AORTA, NL
4515 | 144 | ERX-STAR HKT Limited, HK
8220 | 144 | COLT COLT Technology Services Group Limited, GB
33363 | 136 | BHN-33363, US
16276 | 135 | OVH, FR
5432 | 135 | PROXIMUS-ISP-AS, BE
11427 | 130 | TWC-11427-TEXAS, US
3216 | 130 | SOVAM-AS, RU
33915 | 128 | TNF-AS, NL
20001 | 127 | TWC-20001-PACWEST, US
5384 | 125 | EMIRATES-INTERNET Emirates Internet, AE
15525 | 123 | MEO-EMPRESAS, PT
54113 | 123 | FASTLY, US
13037 | 118 | ZEN-AS Zen Internet - UK, GB
8452 | 117 | TE-AS TE-AS, EG
812 | 111 | ROGERS-COMMUNICATIONS, CA
11351 | 108 | TWC-11351-NORTHEAST, US
8468 | 104 | ENTANET ENTANET International Limited, GB
6848 | 103 | TELENET-AS, BE
14265 | 101 | US-TELEPACIFIC, US
4788 | 101 | TMNET-AS-AP TM Net, Internet Service Provider, MY
3356 | 100 | LEVEL3, US
3758 | 100 | SINGNET SingNet, SG
Fragen? Kontakt: info@zero.bs