Insecure DLL loading in Microsoft products - CVE-2023-28260

Vulnerability identifier: #VU74917

CSH Severity: Medium

CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-28260

CWE-ID: CWE-427

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to the application loads DLL libraries in an insecure manner. A remote attacker can place a specially crafted .dll file on a remote SMB fileshare, trick the victim into opening a file, associated with the vulnerable application, and execute arbitrary code on victim's system.

.NET
SINEC PNI
PowerShell
Visual Studio
Ubuntu
aspnetcore-runtime-6.0 (Ubuntu package)
dotnet-runtime-6.0 (Ubuntu package)
dotnet6 (Ubuntu package)
dotnet-sdk-6.0 (Ubuntu package)
dotnet-host (Ubuntu package)
dotnet-hostfxr-6.0 (Ubuntu package)
dotnet-sdk-7.0 (Ubuntu package)
dotnet7 (Ubuntu package)
aspnetcore-runtime-7.0 (Ubuntu package)
dotnet-runtime-7.0 (Ubuntu package)
dotnet-hostfxr-7.0 (Ubuntu package)
dotnet-host-7.0 (Ubuntu package)

Install updates from vendor's website.

.NET - addressed in versions 6.0.16, 7.0.5
PowerShell - addressed in versions 7.2.11, 7.3.4
SINEC PNI - update to 2.0
aspnetcore-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.116-0ubuntu1~22.04.1, 6.0.116-0ubuntu1~22.10.1
dotnet-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.116-0ubuntu1~22.04.1, 6.0.116-0ubuntu1~22.10.1
dotnet6 (Ubuntu package) - addressed in versions 6.0.116-0ubuntu1~22.04.1, 6.0.116-0ubuntu1~22.10.1
dotnet-sdk-6.0 (Ubuntu package) - addressed in versions 6.0.116-0ubuntu1~22.04.1, 6.0.116-0ubuntu1~22.10.1
dotnet-host (Ubuntu package) - addressed in versions 6.0.116-0ubuntu1~22.04.1, 6.0.116-0ubuntu1~22.10.1
dotnet-hostfxr-6.0 (Ubuntu package) - addressed in versions 6.0.116-0ubuntu1~22.04.1, 6.0.116-0ubuntu1~22.10.1
dotnet-sdk-7.0 (Ubuntu package) - update to 7.0.105-0ubuntu1~22.10.1
dotnet7 (Ubuntu package) - update to 7.0.105-0ubuntu1~22.10.1
aspnetcore-runtime-7.0 (Ubuntu package) - update to 7.0.105-0ubuntu1~22.10.1
dotnet-runtime-7.0 (Ubuntu package) - update to 7.0.105-0ubuntu1~22.10.1
dotnet-hostfxr-7.0 (Ubuntu package) - update to 7.0.105-0ubuntu1~22.10.1
dotnet-host-7.0 (Ubuntu package) - update to 7.0.105-0ubuntu1~22.10.1

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-28260

• Remote code execution in Microsoft .NET
• Ubuntu update for dotnet6
• Multiple vulnerabilities in Siemens SINEC PNI