ZDI-23-1646: Microsoft Exchange GsmWriter Deserialization of Untrusted Data NTLM Relay Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition or relay NTLM credentials on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-38181.

attackers authentication credentials cve cves cvss data deserialization exchange exploit microsoft microsoft exchange ntlm ntlm relay rating relay service untrusted vulnerability zdi