CVE-2025-21171
HIGH8.1EPSS 0.59%.NET Remote Code Execution Vulnerability
Published: 1/14/2025Modified: 9/4/2025
Also known as:GHSA-p54p-p3qm-8vgjBIT-dotnet-2025-21171BIT-dotnet-sdk-2025-21171BIT-powershell-2025-21171
Description
.NET Remote Code Execution Vulnerability
Affected packages (15)
- Bitnami/dotnet>= 9.0.0, < 9.0.1
- Bitnami/dotnet-sdk>= 9.0.0, < 9.0.100
- Bitnami/powershell>= 7.5.0, < 7.5.2
- NuGet/Microsoft.NetCore.App.Runtime.linux-arm>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.linux-arm64>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.linux-musl-arm>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.linux-musl-arm64>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.linux-musl-x64>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.linux-x64>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.osx-arm64>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.osx-x64>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.win-arm>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.win-arm64>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.win-x64>= 9.0.0, < 9.0.1
- NuGet/Microsoft.NetCore.App.Runtime.win-x86>= 9.0.0, < 9.0.1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |