Scope: Microsoft share point servers
Severity: Critical
This advisory is to reflect newly released information from Microsoft, and to correct the actively exploited Common Vulnerabilities and Exposures (CVEs), which have been confirmed as a network spoofing vulnerability, and a remote code execution (RCE) vulnerability chain. The chain, publicly reported as “ToolShell,” provides unauthenticated access to systems and authenticated access through network spoofing, respectively, and enables malicious actors to fully access SharePoint content, including file systems and internal configurations, and execute code over the network.
