CVE-2023-36788

CWE-94 — Code Injection6 documents6 sources
Severity
7.8HIGH
EPSS
0.4%
top 40.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Microsoft Microsoft .net Framework 2.0 Service Pack 2Microsoft Microsoft .net Framework 3.0 Service Pack 2Microsoft Microsoft .net Framework 3.5+7 more
Timeline
PublishedSep 12
Latest updateSep 13

Description

.NET Framework Remote Code Execution Vulnerability

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages10 packages

▶CVEListV5microsoft/microsoft_.net_framework_3.53.5.0 — 3.0.30729.8957
▶CVEListV5microsoft/microsoft_.net_framework_3.5.13.5.0 — 3.0.30729.8957
▶CVEListV5microsoft/microsoft_.net_framework_3.5_and_4.84.8.0 — 4.8.04667.03
▶CVEListV5microsoft/microsoft_.net_framework_3.5_and_4.6.24.7.0 — 10.0.10240.20162
▶CVEListV5microsoft/microsoft_.net_framework_3.5_and_4.7.24.7.0 — 4.7.04063.05

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-mwmx-c24c-vmmg↗2023-09-12
▶
OSV
CVE-2023-36788↗2023-09-12
▶
CVEList
.NET Framework Remote Code Execution Vulnerability↗2023-09-12
▶

📋Vendor Advisories

2
Red Hat
dotnet: .NET Framework Remote Code Execution Vulnerability↗2023-09-13
▶
Microsoft
.NET Framework Remote Code Execution Vulnerability↗2023-09-12
▶