.NET Framework Information Disclosure Vulnerability

.NET Remoting is a Microsoft feature designed for interprocess communication. When using HTTP channels, a remote and unauthenticated attacker can craft specific payloads to bypass the framework security validations and achieve remote code execution through deserialization.

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

  - Security feature bypass in ASP.NET. An attacker can bypass the security checks that prevents an attacker     from accessing internal applications in a website. (CVE-2023-36560)

  - Privilege escalation vulnerability in FTP component of .NET Framework. An attacker can inject arbitrary     commands to the FTP server. (CVE-2023-36049)

  - Information disclosure vulnerability in .NET Framework. An attacker can obtain the ObjRef URI which could     lead to remote code execution. (CVE-2024-29059

ID	Name	Product	Family	Type	Severity
114274	.NET HTTP Remoting Remote Code Execution	Web App Scanning	Component Vulnerability	Check Based	high
185887	Security Updates for Microsoft .NET Framework (November 2023)	Nessus	Windows : Microsoft Bulletins	Local	critical

Detections

Analytics

CVE-2024-29059

high

Tenable Plugins

high

critical