Test ID:	1.3.6.1.4.1.25623.1.0.834851
Category:	Windows
Title:	.NET Core RCE Vulnerability (Jan 2025)
Summary:	This host is missing an important security; update according to Microsoft security update January 2025.
Description:	Summary: This host is missing an important security update according to Microsoft security update January 2025. Vulnerability Insight: The flaw exists due to a remote code execution vulnerability in .NET Core. Vulnerability Impact: Successful exploitation allows an attacker to conduct remote code execution. Affected Software/OS: .NET Core runtime version 5.0.x prior to 5.0.4, 3.1.x prior to 3.1.13, 2.1.x prior to 2.1.26 and .NET Core SDK version 5.0.x prior to 5.0.104, 3.1.x prior to 3.1.113 and 2.1.x prior to 2.1.522. Solution: Update .NET Core runtime to version 5.0.4 or 3.1.13 or 2.1.26 or later and update .NET Core SDK to version 5.0.104 or 3.1.113 or 2.1.522 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-26701 FEDORA-2021-138728e59b https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YLFATXASXW4OV2ZBSRP4G55HJH73QPBP/ FEDORA-2021-1b22f31541 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WA5WQJVHUL5C4XMJTLY3C67R4WP35EF4/ FEDORA-2021-265a3c7cb9 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2AZOUKMCHT2WBHR7MYDTYXWOBHZW5P5/ FEDORA-2021-3da33cdc80 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBOSSX7U6BSHV5RI74FCOW4ITJ5RRJR5/ FEDORA-2021-904d0bd496 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW3ZSJTTMZAFKGW7NJWTVVFZUYYU2SJZ/ FEDORA-2021-e2d218afe6 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XPUKFHIGP5YNJRRFWKDJ2XRS4WTFJNNK/ https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26701
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.