'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:microsoft_exchange_server_elevation_of_privilege_vulnerability（Rule ID：1070210492）

Release Date：2025/9/15

Rule Name：CVE-2022-41040:Microsoft Exchange Server Elevation of Privilege Vulnerability

Severity：critical

CVE ID：CVE-2022-41040

 

Descripiton：

Microsoft Exchange Server is an email service program of Microsoft Corporation of the United States. It provides functions such as email access, storage, forwarding, voice mail, and email filtering and screening. There is a code problem vulnerability in Microsoft Exchange Server. The attacker exploited this vulnerability to escalate privileges. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.