The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability :

  - A remote code execution vulnerability exists in .NET     Framework, Microsoft SharePoint, and Visual Studio when     the software fails to check the source markup of XML     file input. An attacker who successfully exploited the     vulnerability could run arbitrary code in the context of     the process responsible for deserialization of the XML     content.  (CVE-2020-1147)

Detections

Analytics

Security Updates for Microsoft .NET Framework (July 2020)

high Nessus Plugin ID 138464

Version 1.12

Version 1.11

Version 1.12 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.11 Jan 24, 2023, 7:02 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301241902