7.5

CVE-2024-29059

Warnung

.NET Framework Information Disclosure Vulnerability

.NET Framework Information Disclosure Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ .Net Framework Version 3.5 Update -
   Microsoft ≫ Windows 10 1607 Version -
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
   Microsoft ≫ Windows Server 2016 Version -
   Microsoft ≫ Windows Server 2019 Version -
Microsoft ≫ .Net Framework Version 4.7.2
   Microsoft ≫ Windows 10 1607 Version -
   Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
   Microsoft ≫ Windows Server 2016 Version -
   Microsoft ≫ Windows Server 2019 Version -
Microsoft ≫ .Net Framework Version 3.5 Update -
   Microsoft ≫ Windows 10 1607 Version -
   Microsoft ≫ Windows 10 1809 Version -
   Microsoft ≫ Windows 10 21h2 Version -
   Microsoft ≫ Windows 10 22h2 Version -
   Microsoft ≫ Windows 11 21h2 Version -
   Microsoft ≫ Windows Server 2019 Version -
   Microsoft ≫ Windows Server 2022 Version -
Microsoft ≫ .Net Framework Version 4.8
   Microsoft ≫ Windows 10 1607 Version -
   Microsoft ≫ Windows 10 1809 Version -
   Microsoft ≫ Windows 10 21h2 Version -
   Microsoft ≫ Windows 10 22h2 Version -
   Microsoft ≫ Windows 11 21h2 Version -
   Microsoft ≫ Windows Server 2019 Version -
   Microsoft ≫ Windows Server 2022 Version -
Microsoft ≫ .Net Framework Version 3.5.1
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 2.0 Update sp2
   Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ .Net Framework Version 3.0 Update sp2
   Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ .Net Framework Version 3.5 Update -
   Microsoft ≫ Windows 10 1507 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1507 Version - HwPlatform x86
Microsoft ≫ .Net Framework Version 4.6
   Microsoft ≫ Windows 10 1507 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1507 Version - HwPlatform x86
Microsoft ≫ .Net Framework Version 4.6.2
   Microsoft ≫ Windows 10 1507 Version - HwPlatform x64
   Microsoft ≫ Windows 10 1507 Version - HwPlatform x86
Microsoft ≫ .Net Framework Version 4.6.2
   Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ .Net Framework Version 3.5 Update -
   Microsoft ≫ Windows 10 21h2 Version -
   Microsoft ≫ Windows 10 22h2 Version -
   Microsoft ≫ Windows 11 21h2 Version -
   Microsoft ≫ Windows 11 22h2 Version -
   Microsoft ≫ Windows 11 23h2 Version -
   Microsoft ≫ Windows Server 2022 Version -
   Microsoft ≫ Windows Server 2022 23h2 Version -
Microsoft ≫ .Net Framework Version 4.8.1
   Microsoft ≫ Windows 10 21h2 Version -
   Microsoft ≫ Windows 10 22h2 Version -
   Microsoft ≫ Windows 11 21h2 Version -
   Microsoft ≫ Windows 11 22h2 Version -
   Microsoft ≫ Windows 11 23h2 Version -
   Microsoft ≫ Windows Server 2022 Version -
   Microsoft ≫ Windows Server 2022 23h2 Version -
Microsoft ≫ .Net Framework Version 4.6.2
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.7
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.7.1
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.7.2
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.8
   Microsoft ≫ Windows 10 1607 Version -
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
   Microsoft ≫ Windows Server 2016 Version -

04.02.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft .NET Framework Information Disclosure Vulnerability

Schwachstelle

Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.

Beschreibung

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 98.62% 0.999
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Microsoft 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-209 Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29059
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29059
US Government Resource