CVE-2022-41080Vulnerability
Microsoft Exchange Server Privilege Escalation Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 3 years ago
CISA KEVAdded 10 Jan 2023
Fix due 31 Jan 2023
Used by ransomware: knownCISA KEV catalogue
Fix due 31 Jan 2023
Used by ransomware: knownCISA KEV catalogue
EPSS77.3%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
OWASSRF Explained“…xecutions delivering a ConnectWise Control (ScreenConnect) payload on unpatched Exchange hosts using the exploit chain consisting of CVE-2022-41080 and CVE-2022-41082.”
Indicators reported together
named in the same reports- 40outlook[.]comin 1 report
- hxxp://179.60.149[.]28:4427/in 1 report
- 179.60.149[.]28in 1 report
- hxxp://179.60.149[.]28:4427/22.exein 1 report
- hxxps://autodiscover.hofduncan[.]org/owa/auth/Current/themes/6.css%E2%80%99in 1 report
- autodiscover.hofduncan[.]orgin 1 report
- 155.138.240[.]251in 1 report
- 66.42.116[.]130in 1 report
- mail.stannparish[.]orgin 1 report
Copy these 9 indicators · defanged
Also named with it: CVE-2022-41082
Thanks — we review every report.