CVE-2020-1147

HIGHCISA KEV

7.8

Description

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published7/14/2020

Last Modified10/29/2025

Sourcekev

Honeypot Sightings0

CISA KEV

VendorMicrosoft

Product.NET Framework, SharePoint, Visual Studio

Vulnerability NameMicrosoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

KEV Date Added2021-11-03

Remediation Due Date2022-05-03

Ransomware UseUnknown

Affected Products

microsoft:.net_coremicrosoft:.net_frameworkmicrosoft:sharepoint_enterprise_servermicrosoft:sharepoint_servermicrosoft:visual_studio_2017microsoft:visual_studio_2019microsoft:windows_10microsoft:windows_7microsoft:windows_8.1microsoft:windows_rt_8.1microsoft:windows_server_2008microsoft:windows_server_2012microsoft:windows_server_2016microsoft:windows_server_2019

References

http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html(secure@microsoft.com)

http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html(secure@microsoft.com)

http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html(secure@microsoft.com)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147(secure@microsoft.com)

https://www.exploitalert.com/view-details.html?id=35992(secure@microsoft.com)

http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html(af854a3a-2127-422b-91ae-364da2661108)

http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html(af854a3a-2127-422b-91ae-364da2661108)

http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html(af854a3a-2127-422b-91ae-364da2661108)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploitalert.com/view-details.html?id=35992(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.