Lucene search

[email protected]CVE-2023-24897

HistoryJun 14, 2023 - 3:15 p.m.

CVE-2023-24897

2023-06-1415:15:09

CWE-122

[email protected]

web.nvd.nist.gov

125

nvd

.net

.net framework

visual studio

remote code execution

vulnerability

cve-2023-24897

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.9%

JSON

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Affected configurations

Vulners

NVD

Node

microsoftmicrosoft_visual_studio_2017_15.9 (includes 15.0 - 15.8)Range15.9.0–15.9.55

microsoftmicrosoft_visual_studio_2022_17.2Range17.2.0–17.2.16

microsoftmicrosoft_visual_studio_2019_16.11 (includes 16.0 - 16.10)Range16.11.0–16.11.27

microsoftmicrosoft_visual_studio_2022_17.0Range17.0.0–17.0.22

microsoftmicrosoft_visual_studio_2022_17.4Range17.4.0–17.4.8

microsoftvisual_studioRange12.0.0–12.0.40700.05

microsoftvisual_studioRange14.0.0–14.0.27555.03

microsoft.net_7.0Range7.0.0–7.0.7

microsoft.net_6.0Range6.0.0–6.0.18

microsoftmicrosoft_visual_studio_2022_17.6Range17.6.0–17.6.3

microsoftpowershell_7.2Range7.2.0–7.2.12

microsoft.net_frameworkRange4.8.0–4.8

microsoft.net_frameworkRange4.7.0–4.7.2

microsoft.net_frameworkRange3.0.0.0–4.7.2

microsoft.net_frameworkRange4.7.0–4.7.2

microsoft.net_frameworkMatch4.8.1

microsoft.net_frameworkRange4.7.0–4.6.2

VendorProductVersionCPE
microsoftmicrosoft_visual_studio_2017_15.9 (includes 15.0 - 15.8)*cpe:2.3:a:microsoft:microsoft_visual_studio_2017_15.9 (includes 15.0 - 15.8):*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.2*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.2:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2019_16.11 (includes 16.0 - 16.10)*cpe:2.3:a:microsoft:microsoft_visual_studio_2019_16.11 (includes 16.0 - 16.10):*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.0*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.0:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.4*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.4:*:*:*:*:*:*:*:*
microsoftvisual_studio*cpe:2.3:a:microsoft:visual_studio:*:5:*:*:*:*:*:*
microsoftvisual_studio*cpe:2.3:a:microsoft:visual_studio:*:3:*:*:*:*:*:*
microsoft.net_7.0*cpe:2.3:a:microsoft:.net_7.0:*:*:*:*:*:*:*:*
microsoft.net_6.0*cpe:2.3:a:microsoft:.net_6.0:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.6*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.6:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	microsoft_visual_studio_2017_15.9 (includes 15.0 - 15.8)	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2017_15.9 (includes 15.0 - 15.8)::::::::
microsoft	microsoft_visual_studio_2022_17.2	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.2::::::::
microsoft	microsoft_visual_studio_2019_16.11 (includes 16.0 - 16.10)	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2019_16.11 (includes 16.0 - 16.10)::::::::
microsoft	microsoft_visual_studio_2022_17.0	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.0::::::::
microsoft	microsoft_visual_studio_2022_17.4	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.4::::::::
microsoft	visual_studio	*	cpe:2.3:a:microsoft:visual_studio::5::::::*
microsoft	visual_studio	*	cpe:2.3:a:microsoft:visual_studio::3::::::*
microsoft	.net_7.0	*	cpe:2.3:a:microsoft:.net_7.0::::::::
microsoft	.net_6.0	*	cpe:2.3:a:microsoft:.net_6.0::::::::
microsoft	microsoft_visual_studio_2022_17.6	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.6::::::::

Rows per page:

1-10 of 221

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "15.9.0",
        "lessThan": "15.9.55",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.2",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.2.0",
        "lessThan": "17.2.16",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "16.11.0",
        "lessThan": "16.11.27",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.0",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.0.0",
        "lessThan": "17.0.22",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.4",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2022:17.4:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.4.0",
        "lessThan": "17.4.8",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2013 Update 5",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio:2013:update_5:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "12.0.0",
        "lessThan": "12.0.40700.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2015 Update 3",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "14.0.0",
        "lessThan": "14.0.27555.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET 7.0",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:7.0.0:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "7.0.0",
        "lessThan": "7.0.7",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET 6.0",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "6.0.0",
        "lessThan": "6.0.18",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.6",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.6.0",
        "lessThan": "17.6.3",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "PowerShell 7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "7.2.0",
        "lessThan": "7.2.12",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 AND 4.8",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2022",
      "Windows Server 2022 (Server Core installation)",
      "Windows 10 Version 1809 for 32-bit Systems",
      "Windows Server 2019 (Server Core installation)",
      "Windows 11 version 21H2 for x64-based Systems",
      "Windows 10 Version 21H2 for 32-bit Systems",
      "Windows 11 version 21H2 for ARM64-based Systems",
      "Windows 10 Version 22H2 for x64-based Systems",
      "Windows 10 Version 21H2 for ARM64-based Systems",
      "Windows 10 Version 22H2 for 32-bit Systems",
      "Windows 10 Version 21H2 for x64-based Systems",
      "Windows 10 Version 22H2 for ARM64-based Systems",
      "Windows Server 2019",
      "Windows 10 Version 1809 for x64-based Systems"
    ],
    "versions": [
      {
        "version": "4.8.0",
        "lessThan": "4.8.4644.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.8",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "Windows Server 2012 R2",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "Windows 10 Version 1607 for 32-bit Systems",
      "Windows Server 2012",
      "Windows Server 2016",
      "Windows Server 2016 (Server Core installation)",
      "Windows 10 Version 1607 for x64-based Systems",
      "Windows Server 2012 R2 (Server Core installation)",
      "Windows Server 2012 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "4.8.0",
        "lessThan": "4.8.4644.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 AND 4.7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 Version 1809 for 32-bit Systems",
      "Windows 10 Version 1809 for x64-based Systems",
      "Windows 10 Version 1809 for ARM64-based Systems",
      "Windows Server 2019",
      "Windows Server 2019 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "4.7.4050.0",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "4.8.4644.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2016",
      "Windows 10 Version 1607 for x64-based Systems",
      "Windows Server 2016 (Server Core installation)",
      "Windows 10 Version 1607 for 32-bit Systems"
    ],
    "versions": [
      {
        "version": "3.0.0.0",
        "lessThan": "10.0.14393.5989",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "Windows Server 2012",
      "Windows Server 2012 (Server Core installation)",
      "Windows Server 2012 R2",
      "Windows Server 2012 R2 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "4.7.04043.0",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "4.7.4050.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 AND 4.8.1",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2022",
      "Windows Server 2022 (Server Core installation)",
      "Windows 11 version 21H2 for x64-based Systems",
      "Windows 10 Version 21H2 for 32-bit Systems",
      "Windows 10 Version 21H2 for ARM64-based Systems",
      "Windows 11 version 21H2 for ARM64-based Systems",
      "Windows 10 Version 21H2 for x64-based Systems",
      "Windows 11 Version 22H2 for x64-based Systems",
      "Windows 10 Version 22H2 for x64-based Systems",
      "Windows 10 Version 22H2 for 32-bit Systems",
      "Windows 11 Version 22H2 for ARM64-based Systems",
      "Windows 10 Version 22H2 for ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "4.8.1",
        "lessThan": "4.8.9166.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.6.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "Windows Server 2008 for x64-based Systems Service Pack 2",
      "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "4.7.04043.0",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "4.7.4050.0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 and 4.6.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 for 32-bit Systems",
      "Windows 10 for x64-based Systems"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "10.0.10240.19983",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]