Actively exploited · Published Jul 14, 2020 · Assigned by microsoft
CVE-2020-1147
High 7.8 Exploited
In plain English
A high-severity security flaw in Microsoft .NET Framework 2.0 from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on November 3, 2021). The chance it is exploited in the next 30 days is estimated at 95.8% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Fixed versions are available - upgrade the affected package.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by May 3, 2022.
Official description
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| NuGet | microsoft.netcore.app | 2.1.20 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.linux-arm | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.linux-arm64 | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.linux-musl-arm64 | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.linux-musl-x64 | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.linux-x64 | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.osx-x64 | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.rhel.6-x64 | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.win-arm | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.win-arm64 | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.win-x64 | 3.1.6 | GHSA-g5vf-38cp-4px9 |
| NuGet | microsoft.netcore.app.runtime.win-x86 | 3.1.6 | GHSA-g5vf-38cp-4px9 |
Affected products (as reported)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147 x_refsource_MISC
- http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html x_refsource_MISC
- http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html x_refsource_MISC
- https://www.exploitalert.com/view-details.html?id=35992 x_refsource_MISC
- http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147 government-resource