Over 20,000 vulnerable Microsoft Exchange servers exposed to attacks

December 2, 2023: Tens of thousands of Microsoft Exchange email servers across Europe, the U.S., and Asia, exposed on the public internet, are at risk due to remote code execution flaws. These servers run on unsupported software versions, making them vulnerable to multiple security issues, including critical ones.

The ShadowServer Foundation reported nearly 20,000 such servers, with more than half in Europe, over 6,000 in North America, and about 2,200 in Asia. Additionally, a Macnica security researcher found over 30,000 unsupported Microsoft Exchange servers, including versions from 2007 to 2013.

These servers are susceptible to various vulnerabilities, notably the ProxyLogon and ProxyShell exploits. Despite available mitigations, the only long-term solution for these end-of-life servers is upgrading to a version that still receives security updates, as emphasized by Microsoft.

Source: https://www.bleepingcomputer.com/news/security/over-20-000-vulnerable-microsoft-exchange-servers-exposed-to-attacks/