--- title: "Run an Exchange Server? Hurry Up and Patch This Vulnerability" id: "49594" type: "post" slug: "run-an-exchange-server-hurry-up-and-patch-this-vulnerability" published_at: "2020-03-10T22:20:35+00:00" modified_at: "2026-03-17T03:08:26+00:00" url: "https://associationsnow.com/2020/03/10/run-an-exchange-server-hurry-up-and-patch-this-vulnerability/" markdown_url: "https://associationsnow.com/2020/03/10/run-an-exchange-server-hurry-up-and-patch-this-vulnerability.md" excerpt: "A high-profile vulnerability recently disclosed in Microsoft Exchange is being exploited by state-level actors, warn security experts. Fortunately, there is a patch available." taxonomy_category: - "Advocacy" taxonomy_post_tag: - "AssociationsNow" - "cybersecurity" - "server" - "Technology" - "vulnerability" taxonomy_content_format: - "Article" taxonomy_role: - "Director" - "Manager" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » Run an Exchange Server? Hurry Up and Patch This Vulnerability Many associations rely on Microsoft Exchange as a fundamental part of the way they work, and if they do, they’re going to want to batten down the hatches. > A remote code execution [#vulnerability (opens in a new tab)](https://twitter.com/hashtag/vulnerability?src=hash&ref_src=twsrc%5Etfw) > (CVE-2020-0688) exists in Microsoft Exchange Server. If unpatched, an attacker with email credentials can execute commands on your server. > > Mitigation Guidance available at: [https://t.co/MMlBo8BsB0 (opens in a new tab)](https://t.co/MMlBo8BsB0) > > — NSA/CSS (@NSAGov) [March 7, 2020 (opens in a new tab)](https://twitter.com/NSAGov/status/1236099750610563074?ref_src=twsrc%5Etfw) This week, the National Security Agency [spoke out on Twitter (opens in a new tab)](https://twitter.com/NSAGov/status/1236099750610563074) about a vulnerability that affects all versions of Microsoft Exchange Server between 2010 and 2019. The security issue allows for remote code to be executed on the widely used servers when users fail to properly create cryptographic install keys for the server during installation. Many users don’t, meaning that numerous Exchange servers are on the internet that are vulnerable to this oversight. The issue was [disclosed by Microsoft back in February (opens in a new tab)](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688) , but is drawing attention now due to its use by state-level forces, [according to ZDNet (opens in a new tab)](https://www.zdnet.com/article/multiple-nation-state-groups-are-hacking-microsoft-exchange-servers/) . [As BetaNews notes (opens in a new tab)](https://betanews.com/2020/03/10/microsoft-exchange-server-vulnerability-hackers/) , IT security firm Volexity has warned that many companies had already seen their servers compromised, and while a patch has been released, many companies had not taken steps to apply the patch. “Volexity has observed multiple [advanced persistent threat] actors exploiting or attempting to exploit on-premise Exchange servers,” [the firm said on its blog (opens in a new tab)](https://www.volexity.com/blog/2020/03/06/microsoft-exchange-control-panel-ecp-vulnerability-cve-2020-0688-exploited/) . “In some cases the attackers appear to have been waiting for an opportunity to strike with credentials that had otherwise been of no use.” Beyond patching, solutions to the problem recommended by the security firm include the use of two-factor authentication, which can slow down the attack, and putting access control list restrictions on the Exchange Control Panel virtual directories, which can prevent attackers from getting in. The long-standing use and historic market position has made Exchange Server particularly vulnerable to attacks of this nature over the years, and this is not the only one. Microsoft has recently urged Exchange users to disable old protocols that had gained vulnerabilities over time, [noting that the vulnerabilities had been exploited (opens in a new tab)](https://www.bleepingcomputer.com/news/microsoft/microsoft-urges-exchange-admins-to-disable-smbv1-to-block-malware/) by ransomware or high-profile malware attacks such as WannaCry. (doyata/iStock/Getty Images Plus) [Ernie Smith](https://associationsnow.com/author/ernie-smith/) Ernie Smith is a former senior editor for Associations Now. [More articles by this author](https://associationsnow.com/author/ernie-smith/) Tags: [#cybersecurity](https://associationsnow.com/tag/cybersecurity/) [#server](https://associationsnow.com/tag/server/) [#Technology](https://associationsnow.com/tag/technology/) [#vulnerability](https://associationsnow.com/tag/vulnerability/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/) - [VideoThe Career Moves Every Association Leader Needs Right NowSeptember 24, 2026](https://associationsnow.com/2026/09/24/the-career-moves-every-association-leader-needs-right-now/) - [VideoNCRA: Safeguarding Cancer Surveillance: An Advocacy Response to FY26 Budget ThreatsSeptember 24, 2026](https://associationsnow.com/2026/09/24/ncra-safeguarding-cancer-surveillance-an-advocacy-response-to-fy26-budget-threats/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2020%2F03%2F10%2Frun-an-exchange-server-hurry-up-and-patch-this-vulnerability%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !