Lucene search

[email protected]CVE-2023-28260

HistoryApr 11, 2023 - 9:15 p.m.

CVE-2023-28260

2023-04-1121:15:25

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

215

.net

dll hijacking

remote code execution

vulnerability

cve-2023-28260

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

55.0%

JSON

.NET DLL Hijacking Remote Code Execution Vulnerability

VendorProductVersionCPE
microsoft.net_6.0*cpe:2.3:a:microsoft:.net_6.0:*:*:*:*:*:*:*:*
microsoft.net_7.0*cpe:2.3:a:microsoft:.net_7.0:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.5*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.5:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.4*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.4:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.2*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.2:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.0*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.0:*:*:*:*:*:*:*:*
microsoftpowershell_7.3*cpe:2.3:a:microsoft:powershell_7.3:*:*:*:*:*:*:*:*
microsoftpowershell_7.2*cpe:2.3:a:microsoft:powershell_7.2:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	.net_6.0	*	cpe:2.3:a:microsoft:.net_6.0::::::::
microsoft	.net_7.0	*	cpe:2.3:a:microsoft:.net_7.0::::::::
microsoft	microsoft_visual_studio_2022_17.5	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.5::::::::
microsoft	microsoft_visual_studio_2022_17.4	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.4::::::::
microsoft	microsoft_visual_studio_2022_17.2	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.2::::::::
microsoft	microsoft_visual_studio_2022_17.0	*	cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.0::::::::
microsoft	powershell_7.3	*	cpe:2.3:a:microsoft:powershell_7.3::::::::
microsoft	powershell_7.2	*	cpe:2.3:a:microsoft:powershell_7.2::::::::