---
title: Getting Ahead of the Current Exchange Server Vulnerabilities
description: Microsoft has released a Security Update (SU) for those Exchange servers that may be behind in Cumulative Updates (CU), in Exchange Server Vulnerabilities.
---

[KIS News ](https://www.kiscc.com/news)

# [Getting Ahead of the Current Exchange Server Vulnerabilities](https://www.kiscc.com/news/getting-ahead-of-the-current-exchange-server-vulnerabilities)

 Written by [David Powel](https://www.kiscc.com/news/author/david-powel) | March 25, 2021

##### It's been three weeks since Microsoft's announcement, and I am still running across clients who are vulnerable to the current on-premise Exchange server exploits.

Not surprisingly, perhaps, many of these same clients are also behind on their Exchange updates, and this raised the bar required to remediate the vulnerabilities. 

The good news is that Microsoft has released a Security Update (SU) for those Exchange servers that may be behind in Cumulative Updates (CU). Though not the preferred solution, these patches offer a more immediate path to temporarily address current vulnerability while it is actively under exploit by purveyors of Cryptoware. You can find information about these updates in the Microsoft Exchange Blog post [here](https://techcommunity.microsoft.com/t5/exchange-team-blog/march-2021-exchange-server-security-updates-for-older-cumulative/ba-p/2192020).

Some important bullets from the Microsoft article:

About the installation of these updates:

- These updates **must** be installed from an elevated command prompt:

1. Download the update but do not run it immediately.
2. Temporarily disable file-level antivirus software.
3. Select Start, and type CMD.
4. In the results, right-click Command Prompt, and then select Run as administrator.
5. If the User Account Control dialog box appears, choose Yes, and then select Continue.
6. Type the full path of the .msp file, and then press Enter.
7. After the installation is finished, re-enable the antivirus software, and then restart the computer. (You might be prompted by the installer to restart.)

- Installing the SUs mentioned here and then installing a later CU **will** make the server vulnerable to exploits again until the CU you install contains the March 2021 security fixes (Exchange 2016 CU 20 and Exchange 2019 CU 9 – and newer – include March 2021 security updates).
- Installing updates requires a reboot (even if not prompted). The server will not be protected until after the reboot.
- After installing one of these updates, you might see older Exchange security updates for your older CU available for download from Microsoft Update. Install the older security update from Microsoft Update and your servers will stay protected (for 4 CVEs mentioned before).
- If you run into issues after installation, please see [aka.ms/exupdatefaq](https://aka.ms/exupdatefaq) first. You can also uninstall these updates (using Add/Remove Programs) if needed.

These additional updates are available in [KB5000871](https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-microsoft-exchange-server-2019-2016-and-2013-march-2-2021-kb5000871-9800a6bb-0a21-4ee7-b9da-fa85b3e1d23b)

 

[View full post](https://www.kiscc.com/news/getting-ahead-of-the-current-exchange-server-vulnerabilities)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "David Powel"
  },
  "dateModified" : "2025-08-12T22:01:05.942Z",
  "datePublished" : "2021-03-25T22:54:12Z",
  "headline" : "Getting Ahead of the Current Exchange Server Vulnerabilities",
  "image" : {
    "@type" : "ImageObject",
    "height" : 175,
    "url" : "https://f.hubspotusercontent30.net/hubfs/4615539/Security%20Image%20-%20Keep%20IT%20Simple%20-%20Blog%20Image%20-%202021-1.jpg",
    "width" : 262
  },
  "mainEntityOfPage" : "https://www.kiscc.com/news/getting-ahead-of-the-current-exchange-server-vulnerabilities",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "KIS Updates"
  }
}
```