CVE-2025-24043
Published: 11 March 2025
Description
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Security Summary
CVE-2025-24043 is an improper verification of cryptographic signature vulnerability (CWE-347) affecting the .NET framework. Published on 2025-03-11, it enables an authorized attacker to execute code over a network due to flawed signature validation mechanisms within .NET components.
The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating exploitation requires network access, high attack complexity, and low privileges. A low-privileged authorized attacker can leverage this flaw without user interaction to achieve high-impact confidentiality, integrity, and availability effects, culminating in remote code execution.
For mitigation details, refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24043.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The vulnerability enables remote code execution over a network via flawed cryptographic signature verification in .NET components, directly mapping to exploitation of public-facing applications for initial access or code execution.