DNA View

High Severity Vulnerability

This vulnerability has been rated as High severity. Immediate action is recommended.

CVE-2025-21171

High
Low Medium High Critical
7.5
CVSS Score
Published: Jan 14, 2025
Last Modified: Jul 10, 2025

Vulnerability Description

.NET Remote Code Execution Vulnerability

CVSS Metrics

Common Vulnerability Scoring System

Vector String:

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
N
Attack Complexity
H
Privileges Required
N
User Interaction
R
Scope
U
Confidentiality
H
Integrity
H
Availability
H

Known Affected Software

57 configuration(s) from 1 vendor(s)

visual_studio_2022
Version:
17.8.10
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.10:*:*:*:*:*:*:*
powershell
Version:
7.5
CPE:
cpe:2.3:a:microsoft:powershell:7.5:-:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.12
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.12:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.6
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.6:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.4
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.4:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.0
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.0:*:*:*:*:-:*:*
visual_studio_2022
Version:
17.12.2
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.12.2:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.13
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.13:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.3
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.3:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.18
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.18:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.15
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.15:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.11
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.11:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.20
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.20:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.19
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.19:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.12.3
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.12.3:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.5
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.5:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.2
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.2:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.21
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.21:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.4
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.4:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.3
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.3:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.16
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.16:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.4
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.4:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.3
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.3:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.0
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.0:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.7
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.7:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.14
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.14:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.7
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.7:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.5
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.5:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.6
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.6:*:*:*:*:-:*:*
visual_studio_2022
Version:
17.8.5
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.5:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.12.1
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.12.1:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.0
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.0:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.1
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.1:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.2
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.2:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.1
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.1:*:*:*:*:*:*:*
.net
Version:
9.0.0
CPE:
cpe:2.3:a:microsoft:.net:9.0.0:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.10
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.10:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.8
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.8:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.16
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.16:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.13
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.13:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.9
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.9:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.12
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.12:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.11
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.11:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.12.0
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.12.0:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.17
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.17:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.14
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.14:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.15
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.15:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.7
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.7:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.9
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.9:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.6
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.6:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.9
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.9:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.8.8
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.8.8:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.8
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.8:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.6.2
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.6.2:*:*:*:*:*:*:*
visual_studio_2022
Version:
17.10.1
CPE:
cpe:2.3:a:microsoft:visual_studio_2022:17.10.1:*:*:*:*:*:*:*
This vulnerability affects 57 software configuration(s). Ensure you patch all affected systems.

Available Security Patches

2 patches available from vendors

View All Patches
Microsoft

2025-Jan-CVE-2025-21171

CVE-2025-21171: .NET Remote Code Execution Vulnerability

Severity
Unknown
Released
Oct 22, 2025
Security Update
SUSE

CVE-2025-21171

CVE-2025-21171

Severity
Unknown
Released
Jan 22, 2025
Security Update

Severity Details

7.5
out of 10.0
High

Weakness Type (CWE)

CWE-122

Heap-based Buffer Overflow

Description
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Exploit Likelihood
High
Typical Severity
High
Abstraction Level
Variant

Key Information

Published Date
January 14, 2025