CVE-2020-1147HIGH· 7.8MITRENVDGHSAExploit-DB대응게시일: 1970. 01. 01.수정일: 2025. 10. 29.CNA: secure@microsoft.comAnalyzed
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the
위협 신호 · CVSS · EPSS · KEV
즉시 패치· 실측 악용 확인 · KEV 등재
CVSS
7.8high
이론적 심각도 점수
EPSS
94.0%상위 0.2%
30일 내 악용 확률 예측
KEV
등재됨등재일 2021. 11. 03.
패치 기한 2022. 05. 03.
권장 대응 기한3일 이내+ 침해 포렌식CISA SSVC 기준
즉시 패치 + 침해 여부 포렌식 분석
KEV 악용자동화 가능완전 장악· KEV 등재 · 자동화 가능 · 완전 장악 · 내부 한정
CVSS 벡터 · 메트릭
악용 경로
공격 벡터로컬
공격 복잡도낮음
필요 권한불필요
사용자 상호작용필요
범위불변
영향
기밀성 영향높음
무결성 영향높음
가용성 영향높음
버전별 점수
CVSS 3.17.8HIGH· 악용성 1.8· 영향도 5.9
CVSS 3.17.8HIGH· 악용성 1.8· 영향도 5.9
CVSS 2.06.8MEDIUM· 악용성 8.6· 영향도 6.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H상세 설명
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
AI 심층 분석
공격 시나리오 · 재현 가능한 PoC 페이로드 · 즉시 적용 가능한 차단 패치를 한 번에 받아 보세요. 보안 운영팀이 그대로 점검·티켓팅에 쓸 수 있는 형태로 정리해 드립니다.
영향받는 제품·버전
- microsoft .net_corewindows
- microsoft .net_corewindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft windows_server_2008windows
- microsoft .net_frameworkwindows
- microsoft windows_8.1windows
- microsoft windows_server_2012windows
- microsoft windows_server_2012windows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft windows_10windows
- microsoft windows_server_2016windows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft windows_10windows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft windows_10windows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft windows_10windows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft windows_10windows
- microsoft windows_10windows
- microsoft windows_server_2016windows
- microsoft windows_server_2019windows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft windows_10windows
- microsoft windows_10windows
- microsoft windows_10windows
- microsoft windows_10windows
- microsoft windows_server_2016windows
- microsoft windows_server_2016windows
- microsoft windows_server_2016windows
- microsoft windows_server_2019windows
- microsoft .net_frameworkwindows
- microsoft windows_7windows
- microsoft windows_server_2008windows
- microsoft .net_frameworkwindows
- microsoft windows_7windows
- microsoft windows_8.1windows
- microsoft windows_rt_8.1windows
- microsoft windows_server_2008windows
- microsoft windows_server_2008windows
- microsoft windows_server_2012windows
- microsoft windows_server_2012windows
- microsoft .net_frameworkwindows
- microsoft windows_server_2008windows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft .net_frameworkwindows
- microsoft windows_7windows
- microsoft windows_8.1windows
- microsoft windows_server_2008windows
- microsoft windows_server_2012windows
- microsoft windows_server_2012windows
- microsoft .net_frameworkwindows
- microsoft windows_10windows
- microsoft windows_10windows
- microsoft windows_10windows
- microsoft windows_7windows
- microsoft windows_8.1windows
- microsoft windows_rt_8.1windows
- microsoft windows_server_2008windows
- microsoft windows_server_2012windows
- microsoft windows_server_2012windows
- microsoft windows_server_2016windows
- microsoft windows_server_2016windows
- microsoft sharepoint_enterprise_serverwindows
- microsoft sharepoint_enterprise_serverwindows
- microsoft sharepoint_serverwindows
- microsoft sharepoint_serverwindows
- microsoft visual_studio_201715.0 - 15.9windows
- microsoft visual_studio_201916.0 - 16.6windows
영향받는 구성 (CPE) 42
- microsoft .net_core 2.1cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:*
- microsoft .net_core 3.1cpe:2.3:a:microsoft:.net_core:3.1:*:*:*:*:*:*:*
- microsoft .net_framework 2.0cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
- microsoft .net_framework 3.0cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
- microsoft windows_server_2008cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
- microsoft .net_framework 3.5cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
- microsoft windows_8.1cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
- microsoft windows_server_2012cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
- microsoft windows_server_2012 r2cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
- microsoft .net_framework 4.6.2cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
- microsoft .net_framework 4.7cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
- microsoft .net_framework 4.7.1cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
- microsoft .net_framework 4.7.2cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
- microsoft windows_10 1607cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
- microsoft windows_server_2016cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
- microsoft .net_framework 4.6cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
- microsoft .net_framework 4.6.1cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*
- microsoft windows_10cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
- microsoft windows_10 1709cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
- microsoft windows_10 1803cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
- microsoft windows_10 1809cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
- microsoft windows_server_2016 1803cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
- microsoft windows_server_2019cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
- microsoft .net_framework 4.8cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*
- microsoft windows_10 1903cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
- microsoft windows_10 1909cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*
- microsoft windows_10 2004cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*
- microsoft windows_server_2016 1903cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
- microsoft windows_server_2016 1909cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*
- microsoft windows_server_2016 2004cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*
- microsoft .net_framework 3.5.1cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
- microsoft windows_7cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
- microsoft windows_server_2008 r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
- microsoft .net_framework 4.5.2cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*
- microsoft windows_rt_8.1cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
- microsoft windows_server_2008 r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
- microsoft sharepoint_enterprise_server 2013cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
- microsoft sharepoint_enterprise_server 2016cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
- microsoft sharepoint_server 2010cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
- microsoft sharepoint_server 2019cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
- microsoft visual_studio_2017≥ 15.0 ≤ 15.9cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
- microsoft visual_studio_2019≥ 16.0 ≤ 16.6cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
참고 자료 6
- http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.htmlExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147PatchVendor Advisory
- https://www.exploitalert.com/view-details.html?id=35992ExploitThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147US Government Resource
링크 내용 불러오는 중…