CVE-2022-41040

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

99.96% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-09-30, used in ransomware campaigns

Nuclei

unknown

Published

2022-10-03

Updated

2025-10-21

Proof-of-concept exploits (11)

• http://packetstormsecurity.com/files/170066/Microsoft-Exchange-ProxyNotShell-Remote-Code-…
• 0-Gram/CVE-2022-410400★ · 2024-11-23
• CyprianAtsyor/LetsDefend-CVE-2022-41082-Exploitation-Attempt0★ · 2025-05-16
• ITPATJIDR/CVE-2022-410401★ · 2022-10-15
• Ph33rr/Exploit10★ · 2022-10-04
• TaroballzChen/CVE-2022-41040-metasploit-ProxyNotShell35★ · 2022-10-20
• d3duct1v/CVE-2022-410405★ · 2022-10-06
• kljunowsky/CVE-2022-41040-POC91★ · 2023-01-21
• numanturle/CVE-2022-4104019★ · 2022-10-02
• r3dcl1ff/CVE-2022-410405★ · 2022-10-04
• testanull/ProxyNotShell-PoC412★ · 2022-11-18

Nuclei templates (1)

• linuxadi/40k-nuclei-templates/blob/main/aditya/folder4/CVE-2022-41040.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchange_proxynotsh…

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2022/CVE-2022-41040.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-41082
• CVE-2024-3400
• CVE-2025-53770
• CVE-2014-6321
• CVE-2021-21972
• CVE-2021-22005