CVE-2023-33127

2023-07-1118:15:14

CWE-1220

[email protected]

web.nvd.nist.gov

cve-2023-33127

elevation of privilege

.net

visual studio

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.1%

JSON

.NET and Visual Studio Elevation of Privilege Vulnerability

Affected configurations

Nvd

Node

microsoft.netRange6.0.0–6.0.20

microsoft.netRange7.0.0–7.0.9

microsoftvisual_studio_2022Range17.0–17.0.23

microsoftvisual_studio_2022Range17.2.0–17.2.17

microsoftvisual_studio_2022Range17.4.0–17.4.9

microsoftvisual_studio_2022Range17.6.0–17.6.5

microsoftvisual_studio_2022Match17.3

VendorProductVersionCPE
microsoft.net*cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
microsoftvisual_studio_2022*cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
microsoftvisual_studio_202217.3cpe:2.3:a:microsoft:visual_studio_2022:17.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	.net	*	cpe:2.3:a:microsoft:.net::::::::
microsoft	visual_studio_2022	*	cpe:2.3:a:microsoft:visual_studio_2022::::::::
microsoft	visual_studio_2022	17.3	cpe:2.3:a:microsoft:visual_studio_2022:17.3:::::::*