CVE-2025-55248

EPSS 0.67%
Veröffentlicht 14.10.2025 17:00:59
Zuletzt bearbeitet 23.10.2025 15:01:44
Erkennungen
Login

.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 20 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ .Net Framework Version 4.6.2

   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Framework Version 4.7

   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Framework Version 4.7.1

   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Framework Version 4.7.2

   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Framework Version 4.6.2

Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x64
Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x86

Microsoft ≫ .Net Framework Version 3.5.1

Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64

Microsoft ≫ .Net Framework Version 3.5 Update -

   Microsoft ≫ Windows 10 21h2
   Microsoft ≫ Windows 10 22h2
   Microsoft ≫ Windows 11 22h2
   Microsoft ≫ Windows 11 23h2
   Microsoft ≫ Windows 11 24h2
   Microsoft ≫ Windows 11 25h2
   Microsoft ≫ Windows Server 2022
   Microsoft ≫ Windows Server 2022 23h2

Microsoft ≫ .Net Framework Version 4.8.1

Microsoft ≫ .Net Framework Version 3.5 Update -

   Microsoft ≫ Windows 10 1809 HwPlatform x64
   Microsoft ≫ Windows 10 1809 HwPlatform x86
   Microsoft ≫ Windows 10 21h2
   Microsoft ≫ Windows 10 22h2
   Microsoft ≫ Windows Server 2019
   Microsoft ≫ Windows Server 2022

Microsoft ≫ .Net Framework Version 4.8

Microsoft ≫ .Net Framework Version 3.5 Update -

   Microsoft ≫ Windows 10 1607 HwPlatform x64
   Microsoft ≫ Windows 10 1607 HwPlatform x86
   Microsoft ≫ Windows 10 1809 HwPlatform x64
   Microsoft ≫ Windows 10 1809 HwPlatform x86
   Microsoft ≫ Windows Server 2016
   Microsoft ≫ Windows Server 2019

Microsoft ≫ .Net Framework Version 4.7.2

Microsoft ≫ .Net Framework Version 3.5 Update -

   Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x86
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ .Net Framework Version 3.0 Update sp2

Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x64
Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x86

Microsoft ≫ .Net Version >= 8.0.0 < 8.0.21

   Apple ≫ macOS Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -

Microsoft ≫ .Net Version >= 9.0.0 < 9.0.10

   Apple ≫ macOS Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -

Microsoft ≫ Visual Studio 2022 Version >= 17.10.0 < 17.10.20

Microsoft ≫ Visual Studio 2022 Version >= 17.12.0 < 17.12.13

Microsoft ≫ Visual Studio 2022 Version >= 17.14.0 < 17.14.17

Microsoft ≫ .Net Framework Version 4.8

   Microsoft ≫ Windows 10 1607 HwPlatform x64
   Microsoft ≫ Windows 10 1607 HwPlatform x86
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
   Microsoft ≫ Windows Server 2016

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.67%	0.477

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.7	2.1	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Microsoft	4.8	1.2	3.6	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

CWE-326 Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55248

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-55248

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-55248

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-55248

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-55248