Blog Post

Exchange Team Blog
6 MIN READ

Released: March 2021 Exchange Server Security Updates

The_Exchange_Team's avatar
The_Exchange_Team
Platinum Contributor
Mar 02, 2021
Note: this post is getting frequent updates; please keep checking back. Last update: 3/19/2021 Microsoft has released a set of out of band security updates for vulnerabilities for the following ver...
Updated Mar 19, 2021
Version 44.0
announcements
Exchange 2010
Exchange 2013
exchange 2016
exchange 2019
on premises
security
reaper111's avatar
reaper111
Copper Contributor
Mar 05, 2021

For me it would be also interessting to know what we can / should do if comprimised, is it enough to install only these patches and recheck after a few hours ? I have one customer with such log entry's, dont look good:

 

#TYPE Selected.System.Management.Automation.PSCustomObject
"DateTime","AnchorMailbox"
"2021-03-03T05:11:55.285Z","ServerInfo~a]@D01-STG-V-WS025.company.local:444/autodiscover/autodiscover.xml?#"
"2021-03-03T07:22:24.144Z","ServerInfo~a]@D01-STG-V-WS025.company.local:444/autodiscover/autodiscover.xml?#"
"2021-03-03T07:57:42.685Z","ServerInfo~a]@D01-STG-V-WS025.company.local:444/autodiscover/autodiscover.xml?#"
"2021-03-03T10:57:22.102Z","ServerInfo~a]@D01-STG-V-WS025.company.local:444/autodiscover/autodiscover.xml?#"
"2021-03-03T11:26:03.441Z","ServerInfo~a]@D01-STG-V-WS025.company.local:444/autodiscover/autodiscover.xml?#"
"2021-03-05T10:32:23.001Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/autodiscover/autodiscover.xml?#"
"2021-03-05T10:32:24.143Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/mapi/emsmdb/?#"
"2021-03-05T10:32:25.472Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/proxyLogon.ecp?#"
"2021-03-05T10:32:30.817Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/GetList?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=VirtualDirectory#"
"2021-03-05T10:32:32.061Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:33.198Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=ResetOABVirtualDirectory#"
"2021-03-05T10:32:34.352Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:35.483Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:36.572Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=ResetOABVirtualDirectory#"
"2021-03-05T10:32:37.679Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:38.817Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:39.937Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=ResetOABVirtualDirectory#"
"2021-03-05T10:32:41.158Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:42.853Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:43.999Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=ResetOABVirtualDirectory#"
"2021-03-05T10:32:45.309Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:46.424Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:47.551Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=ResetOABVirtualDirectory#"
"2021-03-05T10:32:48.664Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:49.788Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:50.921Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=ResetOABVirtualDirectory#"
"2021-03-05T10:32:52.021Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:53.122Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:54.237Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=ResetOABVirtualDirectory#"
"2021-03-05T10:32:55.378Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:56.484Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"
"2021-03-05T10:32:57.590Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=ResetOABVirtualDirectory#"
"2021-03-05T10:32:58.720Z","ServerInfo~akak]@D01-STG-V-WS025.company.local:444/ecp/DDI/DDIService.svc/SetObject?msExchEcpCanary=Z4jtfAbrkUGSYKN6n1QdFxs7yUxU4dgIUI7yElVTAFoBPCtWwkEr6nJ7L_lcAhpi0Uxxb4p_JiY.&schema=OABVirtualDirectory#"