Lucene search

[email protected]CVE-2021-24112

HistoryFeb 25, 2021 - 11:15 p.m.

CVE-2021-24112

2021-02-2523:15:16

[email protected]

web.nvd.nist.gov

205

.net

core

remote code execution

vulnerability

cve-2021-24112

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.6%

JSON

.NET Core Remote Code Execution Vulnerability

Affected configurations

Vulners

NVD

Node

microsoftvisual_studio_2019

microsoftmono_6.12.0Match6.12.0

microsoft.net_core_2.1Match2.1

microsoft.net_core_3.1Match3.1

microsoft.net_5.0Match5.0.0

VendorProductVersionCPE
microsoftvisual_studio_2019*cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
microsoftmono_6.12.06.12.0cpe:2.3:a:microsoft:mono_6.12.0:6.12.0:*:*:*:*:*:*:*
microsoft.net_core_2.12.1cpe:2.3:a:microsoft:.net_core_2.1:2.1:*:*:*:*:*:*:*
microsoft.net_core_3.13.1cpe:2.3:a:microsoft:.net_core_3.1:3.1:*:*:*:*:*:*:*
microsoft.net_5.05.0.0cpe:2.3:a:microsoft:.net_5.0:5.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	visual_studio_2019	*	cpe:2.3:a:microsoft:visual_studio_2019::::::::
microsoft	mono_6.12.0	6.12.0	cpe:2.3:a:microsoft:mono_6.12.0:6.12.0:::::::*
microsoft	.net_core_2.1	2.1	cpe:2.3:a:microsoft:.net_core_2.1:2.1:::::::*
microsoft	.net_core_3.1	3.1	cpe:2.3:a:microsoft:.net_core_3.1:3.1:::::::*
microsoft	.net_5.0	5.0.0	cpe:2.3:a:microsoft:.net_5.0:5.0.0:::::::*

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Visual Studio 2019 for Mac",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2019:-:*:*:*:*:macos:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "8.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Mono 6.12.0",
    "cpes": [
      "cpe:2.3:a:microsoft:mono:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "6.12.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET Core 2.1",
    "cpes": [
      "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "2.1",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET Core 3.1",
    "cpes": [
      "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "3.1",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET 5.0",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "5.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]