.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-1147US | high7.8OT critical | KEV | ||
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.… | ||||
02
references
External citations — patches, advisories, analysis.
- http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.htmlWEB
- http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.htmlWEB
- http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.htmlWEB
- https://github.com/dotnet/announcements/issues/159WEB
- https://nvd.nist.gov/vuln/detail/CVE-2020-1147ADVISORY
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147WEB
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147WEB
- https://www.exploitalert.com/view-details.html?id=35992WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan