Lucene search

K
cve[email protected]CVE-2020-1108
HistoryMay 21, 2020 - 11:15 p.m.

CVE-2020-1108

2020-05-2123:15:14
web.nvd.nist.gov
180
cve-2020-1108
denial of service
.net core
.net framework
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.5%

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka ‘.NET Core & .NET Framework Denial of Service Vulnerability’.

Affected configurations

Vulners
NVD
Node
microsoft.net_core
OR
microsoft.net_core
OR
microsoftmicrosoft_visual_studio_2017_15.9 (includes 15.1 - 15.8)Matchunspecified
OR
microsoftvisual_studioRange16.02019
OR
microsoftmicrosoft_visual_studio_2019_16.4 (includes 16.0 - 16.3)Matchunspecified
OR
microsoftmicrosoft_visual_studio_2019_16.5Matchunspecified
OR
microsoft.net_core_5.0Matchunspecified
OR
microsoftpowershell_core
OR
microsoftpowershell_7.0Matchunspecified
OR
microsoft.net_frameworkRangeWindows 7 for 32-bit Systems Service Pack 14.7.2
OR
microsoft.net_frameworkRangeWindows 7 for x64-based Systems Service Pack 14.7.2
OR
microsoft.net_frameworkRangeWindows 8.1 for 32-bit systems4.7.2
OR
microsoft.net_frameworkRangeWindows 8.1 for x64-based systems4.7.2
OR
microsoft.net_frameworkRangeWindows RT 8.14.7.2
OR
microsoft.net_frameworkRangeWindows Server 2008 R2 for x64-based Systems Service Pack 14.7.2
OR
microsoft.net_frameworkRangeWindows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)4.7.2
OR
microsoft.net_frameworkRangeWindows Server 20124.7.2
OR
microsoft.net_frameworkRangeWindows Server 2012 (Server Core installation)4.7.2
OR
microsoft.net_frameworkRangeWindows Server 2012 R24.7.2
OR
microsoft.net_frameworkRangeWindows Server 2012 R2 (Server Core installation)4.7.2
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1803 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1803 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1709 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1709 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1607 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1607 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2016
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2016 (server core installation)
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 7 for 32-bit systems service pack 1
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 7 for x64-based systems service pack 1
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 8.1 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 8.1 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows rt 8.1
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2008 r2 for x64-based systems service pack 1
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2008 r2 for x64-based systems service pack 1 (server core installation)
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2012
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2012 (server core installation)
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2012 r2
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2012 r2 (server core installation)
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1809 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1809 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2019
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server 2019 (server core installation)
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1909 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1909 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows server
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1903 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1903 for x64-based systems
OR
microsoft.net_frameworkRange19034.8 on windows server
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1803 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1803 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows server
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1809 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1809 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1809 for arm64-based systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows server 2019
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows server 2019 (server core installation)
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1607 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1607 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows server 2016
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows server 2016 (server core installation)
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1709 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1709 for x64-based systems
OR
microsoft.net_frameworkRangeWindows Server 2008 for 32-bit Systems Service Pack 24.6
OR
microsoft.net_frameworkRangeWindows Server 2008 for x64-based Systems Service Pack 24.6
OR
microsoft.net_frameworkRangeService Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 22.0
OR
microsoft.net_frameworkRangeService Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 22.0
OR
microsoft.net_frameworkRangeService Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 23.0
OR
microsoft.net_frameworkRangeService Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 23.0
OR
microsoft.net_frameworkRangeWindows 8.1 for 32-bit systems3.5
OR
microsoft.net_frameworkRangeWindows 8.1 for x64-based systems3.5
OR
microsoft.net_frameworkRangeWindows Server 20123.5
OR
microsoft.net_frameworkRangeWindows Server 2012 (Server Core installation)3.5
OR
microsoft.net_frameworkRangeWindows Server 2012 R23.5
OR
microsoft.net_frameworkRangeWindows Server 2012 R2 (Server Core installation)3.5
OR
microsoft.net_frameworkRangeWindows 7 for 32-bit Systems Service Pack 13.5.1
OR
microsoft.net_frameworkRangeWindows 7 for x64-based Systems Service Pack 13.5.1
OR
microsoft.net_frameworkRangeWindows Server 2008 R2 for x64-based Systems Service Pack 13.5.1
OR
microsoft.net_frameworkRangeWindows 7 for 32-bit Systems Service Pack 14.5.2
OR
microsoft.net_frameworkRangeWindows 7 for x64-based Systems Service Pack 14.5.2
OR
microsoft.net_frameworkRangeWindows 8.1 for 32-bit systems4.5.2
OR
microsoft.net_frameworkRangeWindows 8.1 for x64-based systems4.5.2
OR
microsoft.net_frameworkRangeWindows RT 8.14.5.2
OR
microsoft.net_frameworkRangeWindows Server 2008 for 32-bit Systems Service Pack 24.5.2
OR
microsoft.net_frameworkRangeWindows Server 2008 for x64-based Systems Service Pack 24.5.2
OR
microsoft.net_frameworkRangeWindows Server 2008 R2 for x64-based Systems Service Pack 14.5.2
OR
microsoft.net_frameworkRangeWindows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)4.5.2
OR
microsoft.net_frameworkRangeWindows Server 20124.5.2
OR
microsoft.net_frameworkRangeWindows Server 2012 (Server Core installation)4.5.2
OR
microsoft.net_frameworkRangeWindows Server 2012 R24.5.2
OR
microsoft.net_frameworkRangeWindows Server 2012 R2 (Server Core installation)4.5.2
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1903 for arm64-based systems
OR
microsoft.net_frameworkRangeunspecified4.8 on windows 10 version 1909 for arm64-based systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1709 for arm64-based systems
OR
microsoft.net_frameworkRangeunspecified4.6.2 on windows 10 for 32-bit systems
OR
microsoft.net_frameworkRangeunspecified4.6.2 on windows 10 for x64-based systems
OR
microsoft.net_frameworkRangeunspecified4.7.2 on windows 10 version 1803 for arm64-based systems
VendorProductVersionCPE
microsoft\.net_core*cpe:2.3:a:microsoft:\.net_core:*:*:*:*:*:*:*:*
microsoft\.net_core*cpe:2.3:a:microsoft:\.net_core:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2017_15.9 (includes 15.1 - 15.8)unspecifiedcpe:2.3:a:microsoft:microsoft_visual_studio_2017_15.9 (includes 15.1 - 15.8):unspecified:*:*:*:*:*:*:*
microsoftvisual_studio*cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2019_16.4 (includes 16.0 - 16.3)unspecifiedcpe:2.3:a:microsoft:microsoft_visual_studio_2019_16.4 (includes 16.0 - 16.3):unspecified:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2019_16.5unspecifiedcpe:2.3:a:microsoft:microsoft_visual_studio_2019_16.5:unspecified:*:*:*:*:*:*:*
microsoft.net_core_5.0unspecifiedcpe:2.3:a:microsoft:.net_core_5.0:unspecified:*:*:*:*:*:*:*
microsoftpowershell_core*cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*
microsoftpowershell_7.0unspecifiedcpe:2.3:a:microsoft:powershell_7.0:unspecified:*:*:*:*:*:*:*
microsoft.net_framework*cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 981

CNA Affected

[
  {
    "product": ".NET Core",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "3.1"
      },
      {
        "status": "affected",
        "version": "2.1"
      }
    ]
  },
  {
    "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Visual Studio 2019",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "16.0"
      }
    ]
  },
  {
    "product": "Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Visual Studio 2019 version 16.5",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": ".NET Core 5.0",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "PowerShell Core",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "6.2"
      }
    ]
  },
  {
    "product": "PowerShell 7.0",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 7 for 32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 7 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 8.1 for 32-bit systems"
      },
      {
        "status": "affected",
        "version": "Windows 8.1 for x64-based systems"
      },
      {
        "status": "affected",
        "version": "Windows RT 8.1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 R2"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 R2 (Server Core installation)"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows Server, version 1803  (Server Core Installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows Server 2016",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows Server 2016  (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows RT 8.1",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows Server 2012",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows Server 2012 R2",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019  (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1909 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "1903"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803  (Server Core Installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019  (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016  (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.6",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 for x64-based Systems Service Pack 2"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 2.0",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.0",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 8.1 for 32-bit systems"
      },
      {
        "status": "affected",
        "version": "Windows 8.1 for x64-based systems"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 R2"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 R2 (Server Core installation)"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5.1",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 7 for 32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 7 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 4.5.2",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 7 for 32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 7 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows 8.1 for 32-bit systems"
      },
      {
        "status": "affected",
        "version": "Windows 8.1 for x64-based systems"
      },
      {
        "status": "affected",
        "version": "Windows RT 8.1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 for 32-bit Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 for x64-based Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 R2"
      },
      {
        "status": "affected",
        "version": "Windows Server 2012 R2 (Server Core installation)"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.5%