Vulnerability Details : CVE-2021-26701

.NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112.

Vulnerability category: Execute code

Published 2021-02-25 23:15:17

Updated 2021-11-29 16:36:06

Source Microsoft Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-26701

Probability of exploitation activity in the next 30 days: 6.61%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 93 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2021-26701

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	nvd@nist.gov
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	nvd@nist.gov
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2021-26701

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TW3ZSJTTMZAFKGW7NJWTVVFZUYYU2SJZ/

[SECURITY] Fedora 34 Update: dotnet5.0-5.0.104-1.fc34 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26701

CVE-2021-26701 - Security Update Guide - Microsoft - .NET Core Remote Code Execution Vulnerability
Patch;Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WA5WQJVHUL5C4XMJTLY3C67R4WP35EF4/

[SECURITY] Fedora 33 Update: dotnet5.0-5.0.104-1.fc33 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S2AZOUKMCHT2WBHR7MYDTYXWOBHZW5P5/

[SECURITY] Fedora 32 Update: dotnet3.1-3.1.113-1.fc32 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPUKFHIGP5YNJRRFWKDJ2XRS4WTFJNNK/

[SECURITY] Fedora 34 Update: dotnet3.1-3.1.113-1.fc34 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBOSSX7U6BSHV5RI74FCOW4ITJ5RRJR5/

[SECURITY] Fedora 33 Update: dotnet3.1-3.1.113-1.fc33 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YLFATXASXW4OV2ZBSRP4G55HJH73QPBP/

[SECURITY] Fedora 32 Update: dotnet5.0-5.0.104-1.fc32 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory

Products affected by CVE-2021-26701

Microsoft » .net Core
Versions from including (>=) 3.1 and before (<) 3.1.15
cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
Matching versions
Microsoft » .net Core
Versions from including (>=) 2.1 and before (<) 2.1.28
cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Powershell Core » Version: 7.0
cpe:2.3:a:microsoft:powershell_core:7.0:*:*:*:*:*:*:*
Matching versions
Microsoft » Powershell Core » Version: 7.1
cpe:2.3:a:microsoft:powershell_core:7.1:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio 2019
Versions from including (>=) 16.0 and up to, including, (<=) 16.9
cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio 2019 » Version: N/A For Macos
cpe:2.3:a:microsoft:visual_studio_2019:-:*:*:*:*:macos:*:*
Matching versions
Microsoft » .net
Versions from including (>=) 5.0 and before (<) 5.0.4
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 32
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 33
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 34
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Matching versions