CVE-2020-1147

Scores

EPSS

0.934high93.4%

0%20%40%60%80%100%

Percentile: 93.4%

CVSS

8.8high3.x

0246810

CVSS Score: 8.8/10

All CVSS Scores

CVSS 3.x

8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS 2.0

6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka ‘.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability’.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.

Learn more about Scaner-VS 7

Sources

msrcnvdredhat

CWEs

CWE-502

Related Vulnerabilities

BDU:2020-03369

Exploits

Exploit ID: CVE-2020-1147

Source: cisa

URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Exploit ID: 48747

Source: exploitdb

URL: https://www.exploit-db.com/exploits/48747

Exploit ID: 50151

Source: exploitdb

URL: https://www.exploit-db.com/exploits/50151

Vulnerable Software (124)

Type: Configuration

Product: dotnet

Operating System: rhel

Trait:

{  "fixed": "2.1.516-1.el8_2"}

Source: redhat

Type: Configuration

Product: dotnet

Operating System: rhel

Trait:

{  "fixed": "2.1.516-1.el8_0"}

Source: redhat

Type: Configuration

Product: dotnet

Operating System: rhel

Trait:

{  "fixed": "2.1.516-1.el8_1"}

Source: redhat

Type: Configuration

Product: dotnet3.1

Operating System: rhel

Trait:

{  "fixed": "3.1.106-1.el8_2"}

Source: redhat

Type: Configuration

Product: rh-dotnet21

Operating System: rhel

Trait:

{  "fixed": "2.1-19.el7"}

Source: redhat

Type: Configuration

Product: rh-dotnet21-dotnet

Operating System: rhel

Trait:

{  "fixed": "2.1.516-1.el7"}

Source: redhat

Type: Configuration

Product: rh-dotnet31-dotnet

Operating System: rhel

Trait:

{  "fixed": "3.1.106-1.el7"}

Source: redhat

Type: Configuration

Vendor: *

Product: .net_core

Operating System: * * *

Trait:

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:microsoft:.net_core:3.1:*:*:*:*:*:*:*",...

{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:microsoft:.net_core:3.1:*:*:*:*:*:*:*",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe2...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23u...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23u...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23u...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23u...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23u...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23u...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator":...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator":...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: .net_framework

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23u...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Russian Vulnerability Scanner Database

CVE-2020-1147

Scores

EPSS

CVSS

All CVSS Scores

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality Impact

Integrity Impact

Availability Impact

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Authentication

Confidentiality Impact

Integrity Impact

Availability Impact

Description

Scaner-VS 7 — a modern vulnerability management solution

Sources

CWEs

Related Vulnerabilities

Exploits

Vulnerable Software (124)