ASP.NET Elevation of Privilege Vulnerability
85Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 8.8epss 77%
from disclosure to weapon7 days
Published on NVDAug 8
1st PoC+7d
VulnCheck+966d
exploitation probability
77%top 1% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
ASP.NET Elevation of Privilege Vulnerability
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected products
Microsoft · Microsoft .NET Framework 2.0 Service Pack 2Microsoft · Microsoft .NET Framework 3.5 and 4.6.2Microsoft · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2Microsoft · Microsoft .NET Framework 3.5 AND 4.7.2Microsoft · Microsoft .NET Framework 3.5 AND 4.8Microsoft · Microsoft .NET Framework 3.5 AND 4.8.1Microsoft · Microsoft .NET Framework 4.6.2Microsoft · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2Microsoft · Microsoft .NET Framework 4.8public PoCs found — 1
vulncheckvulncheck.com/xdb/1b87c619aebfunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.