CVE-2022-40140
MEDIUMTrend Micro Apex One - Denial of Service via Origin Validation Error
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-40140. PoCs published by mr-r3b00t, ZephrFish, ipsBruno.
AI-analyzed exploit summary This repository contains PowerShell scripts designed to detect and scan for vulnerabilities related to CVE-2022-40140 and CVE-2022-41082 in Microsoft Exchange Server. It includes scripts for checking server configurations, parsing IIS logs for indicators of compromise, and testing for potential vulnerabilities via HTTP requests.
Description
An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Exploits (3)
This repository contains PowerShell scripts designed to detect and scan for vulnerabilities related to CVE-2022-40140 and CVE-2022-41082 in Microsoft Exchange Server. It includes scripts for checking server configurations, parsing IIS logs for indicators of compromise, and testing for potential vulnerabilities via HTTP requests.
The repository contains a Python script that scans for CVE-2022-40140 and CVE-2022-41082 (NotProxyShell) vulnerabilities in Microsoft Exchange servers. It checks for specific response patterns to determine potential vulnerability but does not include exploit code.
This repository contains a scanner for CVE-2022-40140, which targets Microsoft Exchange Server. The script uses Shodan to find potential targets and sends crafted HTTP requests to detect the vulnerability by checking for the presence of the 'x-feserver' header in responses.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H