CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability

2023-08-0817:08:54

CWE-77

microsoft

github.com

cve-2023-35390 .net code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

AI Score

6.8

Confidence

Low

EPSS

0.021

Percentile

89.5%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*"
    ],
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.2",
    "versions": [
      {
        "status": "affected",
        "version": "17.2.0",
        "lessThan": "17.2.18",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Unknown"
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2022:17.4:*:*:*:*:*:*:*"
    ],
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.4",
    "versions": [
      {
        "status": "affected",
        "version": "17.4.0",
        "lessThan": "17.4.10",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Unknown"
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:*"
    ],
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.6",
    "versions": [
      {
        "status": "affected",
        "version": "17.6.0",
        "lessThan": "17.6.6",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Unknown"
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:*"
    ],
    "vendor": "Microsoft",
    "product": ".NET 6.0",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.0",
        "lessThan": "6.0.21",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Unknown"
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:microsoft:.net:7.0.0:*:*:*:*:*:*:*"
    ],
    "vendor": "Microsoft",
    "product": ".NET 7.0",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThan": "7.0.10",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Unknown"
    ]
  }
]