CVE-2024-30045 : .NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Published 2024-05-14 17:17:17

Updated 2025-01-08 18:36:30

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2024-30045

Microsoft » .net
Versions from including (>=) 8.0.0 and before (<) 8.0.5
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Matching versions
Microsoft » .net
Versions from including (>=) 7.0.0 and before (<) 7.0.19
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Powershell
Versions from including (>=) 7.4 and before (<) 7.4.3
cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio 2022
Versions from including (>=) 17.6.0 and before (<) 17.6.15
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio 2022
Versions from including (>=) 17.8.0 and before (<) 17.8.10
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio 2022
Versions from including (>=) 17.4.0 and before (<) 17.4.19
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio 2022
Versions from including (>=) 17.9.0 and before (<) 17.9.7
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.20%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 42 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L	2.8	3.4	Microsoft Corporation	2024-05-14
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: Low Availability: Low
6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/...	N/A	N/A	MS-CVE-2024-30045	2024-05-14
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: Low Availability: Low
6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L	N/A	N/A	RedHat-CVE-2024-30045	2024-05-14
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: Low Availability: Low

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Assigned by: secure@microsoft.com (Secondary)

https://security.netapp.com/advisory/ntap-20241122-0001/

CVE-2024-30045 .NET Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045

CVE-2024-30045 - Security Update Guide - Microsoft - .NET and Visual Studio Remote Code Execution Vulnerability
Vendor Advisory

Jump to