---
id: 7253
title: "[CVE-2023-42115] Critical and high severity Exim vulnerabilities: everything you need to know"
cve: CVE-2023-42115
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/exim-zero-day-vulnerabilities"
published_at: "2023-10-02T13:53:02Z"
tags: ["rce", "vulnerability", "patching", "exim", "mail-server", "cve-2023-42115"]
phying_url: "https://phying.com/item/7253"
lang: en
---

# [CVE-2023-42115] Critical and high severity Exim vulnerabilities: everything you need to know

## Summary

Six Exim MTA flaws disclosed by ZDI, led by critical CVE-2023-42115: unauthenticated RCE on publicly exposed servers with 'External' authentication enabled. Patch or restrict access urgently.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2023-42115
- **Published:** 2023-10-02T13:53:02Z
- **Original:** https://www.wiz.io/blog/exim-zero-day-vulnerabilities
- **Phying News:** https://phying.com/item/7253