Actively exploited in the wild
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
Microsoft - .NET Core and Visual Studio · Listed in the CISA KEV since 2023-08-09. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-38180
HighCVSS 7.5KEVExploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
A vulnerability in .NET and Visual Studio allows for a Denial of Service (DoS) attack, potentially leading to application or service unavailability. An attacker can exploit this flaw to disrupt system operations.
Risk Assessment
Organizations may experience downtime in critical applications, leading to revenue loss and diminished customer trust. High availability of services is crucial for business operations.
Recommendation
It is recommended to update .NET and Visual Studio to the latest versions that include security patches. Monitoring systems for unusual traffic patterns can also help in detecting attack attempts.
Other vulnerabilities in .NET, Visual Studio
See all- CVE-2022-29145High
A vulnerability in .NET and Visual Studio allows for a Denial of Service (DoS) attack, potentially leading to application or service unavailability. An attacker can exploit this flaw to disrupt system operations.
- CVE-2022-29117High
.NET and Visual Studio contain a Denial of Service (DoS) vulnerability that can lead to application unavailability.
- CVE-2022-24464High
.NET and Visual Studio contain a Denial of Service (DoS) vulnerability that can lead to service unavailability.
- CVE-2023-35390High
A vulnerability in .NET and Visual Studio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on a remote system.
- CVE-2023-33127High
.NET and Visual Studio contain a vulnerability that may lead to elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
- CVE-2023-33135High
.NET and Visual Studio contain an elevation of privilege vulnerability that could allow an attacker to gain higher privileges on the system.
- CVE-2023-33128High
A vulnerability in .NET and Visual Studio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on a remote system.
- CVE-2023-33126High
.NET and Visual Studio contain a vulnerability that allows remote code execution, potentially leading to unauthorized access to the system.
Original NVD description (English source)
.NET and Visual Studio Denial of Service Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS