CVE-2024-29059

HIGH KEV NUCLEI

.NET Framework - Leaking ObjRefs via HTTP .NET Remoting

Title source: nuclei

Description

.NET Framework Information Disclosure Vulnerability

Exploits (1)

nomisec WORKING POC 92 stars
by codewhitesec · infoleak
https://github.com/codewhitesec/HttpRemotingObjRefLeak

Nuclei Templates (1)

.NET Framework - Leaking ObjRefs via HTTP .NET Remoting
HIGHby iamnoooob,rootxharsh,DhiyaneshDk,pdresearch
Shodan: Server: MS .NET Remoting || server: ms .net remoting

References (2)

Scores

CVSS v3 7.5
EPSS 0.9365
EPSS Percentile 99.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CISA KEV 2025-02-04
VulnCheck KEV 2024-04-27
ENISA EUVD EUVD-2024-26106
CWE
CWE-209
Status published
Products (11)
microsoft/.net_framework 3.5
microsoft/.net_framework 4.7.2
microsoft/.net_framework 4.8
microsoft/.net_framework 3.5.1
microsoft/.net_framework 2.0 sp2
microsoft/.net_framework 3.0 sp2
microsoft/.net_framework 4.6
microsoft/.net_framework 4.6.2
microsoft/.net_framework 4.8.1
microsoft/.net_framework 4.7
... and 1 more
Published Mar 23, 2024
KEV Added Feb 04, 2025
Tracked Since Feb 18, 2026