The vulnerability of the .NET software platform and Microsoft Visual Studio, a development environment for software, stems from insufficient testing of input data. This allows attackers to exploit their privileges.

🗓️ 01 Nov 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

Vulnerability in .NET platform and Visual Studio from insufficient input testing, enabling privilege.

Reporter	Title	Published	Views	Family All 101
ATTACKERKB	CVE-2023-32032	14 Jun 202300:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-242)	20 Jul 202300:00	–	nessus
Tenable Nessus	MiracleLinux 9 : dotnet7.0-7.0.107-1.el9.ML.1 (AXSA:2023-6092:17)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : dotnet7.0-7.0.107-1.el8.ML.1 (AXSA:2023-6203:20)	20 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 9 : .NET / 7.0 (ELSA-2023-3592)	17 Jun 202300:00	–	nessus
Tenable Nessus	Oracle Linux 8 : .NET / 7.0 (ELSA-2023-3593)	17 Jun 202300:00	–	nessus
Tenable Nessus	RHEL 9 : .NET 7.0 (RHSA-2023:3592)	14 Jun 202300:00	–	nessus
Tenable Nessus	RHEL 8 : .NET 7.0 (RHSA-2023:3593)	14 Jun 202300:00	–	nessus
Tenable Nessus	Rocky Linux 8 : .NET 7.0 (RLSA-2023:3593)	31 Aug 202300:00	–	nessus
Tenable Nessus	TencentOS Server 3: .NET 7.0 (TSSA-2023:0178)	16 Jun 202500:00	–	nessus

Vulners

Node

microsoft .netRange7.0.0–7.0.7

OR

microsoft powershellRange7.3–7.3.5

OR

microsoft microsoft_visual_studioRange17.6–17.6.3

OR

microsoft microsoft_visual_studioRange17.4–17.4.8

OR

microsoft microsoft_visual_studioRange17.0–17.0.22

OR

microsoft microsoft_visual_studioRange17.2–17.2.16

OR

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

OR

canonical ubuntuMatch22.10

OR

canonical ubuntuMatch22.04

OR

canonical ubuntuMatch23.04

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32032
github	www.github.com/PowerShell/Announcements/issues/45
vuldb	www.vuldb.com/
ubuntu	www.ubuntu.com/security/notices/USN-6161-1
access	www.access.redhat.com/security/cve/CVE-2023-32032
web	www.web.nvd.nist.gov/view/vuln/detail
rhn	www.rhn.redhat.com/errata/RHSA-2023:3592.html
rhn	www.rhn.redhat.com/errata/RHSA-2023:3593.html

05 Nov 2024 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25.7

CVSS 36.5

EPSS0.006

net platform visual studio input testing insufficient testing privilege escalation