Actively exploited · Published Aug 23, 2017 · Assigned by mitre
CVE-2017-11317
Critical 9.8 Exploited
In plain English
A critical-severity security flaw in User Interface (UI) for ASP.NET AJAX from Telerik. Attackers are actively exploiting it in the wild (listed by CISA on April 11, 2022). The chance it is exploited in the next 30 days is estimated at 84.2% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by May 2, 2022.
Official description
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
Affected products (as reported)
Weakness: CWE-326 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- 43874 exploit, x_refsource_EXPLOIT-DB
- http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/unrestricted-file-upload x_refsource_CONFIRM
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006 x_refsource_CONFIRM
- http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11317 government-resource