What is the CVSS score of CVE-2025-24070?

CVE-2025-24070 has a contested CVSS base score of 7.0 from a third party (e.g. CISA-ADP), while the vendor rates it High. vuln.today uses the vendor rating as authoritative.

Which versions of .NET are affected by CVE-2025-24070?

CVE-2025-24070 presents moderate security risk rated CVSS 7.0. Exploitation could compromise the security of affected deployments.. A patch is available.

Is there a public PoC exploit available for CVE-2025-24070?

Yes, a public proof-of-concept exploit is available for CVE-2025-24070. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2025-24070?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

.NET CVE-2025-24070

HIGH

Weak Authentication (CWE-1390)

2025-03-11 secure@microsoft.com

GHSA-2865-hh9g-w894

Authentication Bypass .NET Microsoft Red Hat Suse

High

Disputed · 7.0 NVD

Severity by source

Sources disagree (Low–High)

NVD PRIMARY

7.0 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

SUSE

3.1 LOW

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Red Hat

7.8 HIGH

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 19:52 vuln.today

PoC Detected

Jul 02, 2025 - 14:25 vuln.today

Public exploit code

CVE Published

Mar 11, 2025 - 17:16 nvd

HIGH 7.0

DescriptionCVE.org

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

AnalysisAI

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. [CVSS 7.0 HIGH]

Technical ContextAI

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Affected ProductsAI

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in .NET

View all

CVE-2023-7334 CRITICAL Act Now POC

9.8 Jan 15

Changjetong T+ (through 16.x) has .NET deserialization RCE in an AjaxPro endpoint. Attacker-controlled JSON triggers des

CVE-2019-25359 HIGH This Week POC

8.2 Feb 18

SD.NET RIM versions before 4.7.3c contain a SQL injection vulnerability that allows attackers to inject malicious SQL st

CVE-2026-25925 HIGH This Week POC

7.8 Feb 09

PowerDocu versions prior to 2.4.0 allow arbitrary .NET object instantiation and code execution through unsafe deserializ

CVE-2026-26282 MEDIUM This Month POC

6.6 Feb 19

NanaZip versions 5.0.1252.0 through 6.0.1629.0 contain an out-of-bounds heap read in the .NET Single File bundle parser

CVE-2026-27709 MEDIUM This Month POC

6.6 Feb 26

Out-of-bounds memory read in NanaZip versions 5.0.1252.0 through 6.0.1637.x allows local authenticated attackers to disc

CVE-2020-37103 MEDIUM This Month POC

6.4 Feb 03

DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML

CVE-2026-3263 MEDIUM This Month POC

6.3 Feb 26

Asp.Net-Core-Inventory-Order-Management-System versions up to 9.20250118. contains a security vulnerability (CVSS 6.3).

CVE-2026-26222 CRITICAL Act Now

9.8 Feb 24

Insecure .NET Remoting deserialization in Altec DocLink (Beyond Limits) 4.0.336.0. Exposed TCP endpoints allow unauthent

CVE-2026-25592 CRITICAL Act Now POC

9.9 Feb 06

Microsoft Semantic Kernel SDK has a CVSS 9.9 path traversal vulnerability enabling AI agents to access arbitrary files o

CVE-2026-26333 CRITICAL Act Now

9.8 Feb 13

Unauthenticated .NET Remoting endpoint in Calero VeraSMART before 2022 R1. TCP port 8001 exposes default Object URIs ena

CVE-2026-26335 CRITICAL Act Now POC

9.8 Feb 13

Static ASP.NET machineKey in Calero VeraSMART before 2022 R1. Hardcoded key enables ViewState deserialization attacks an

CVE-2026-27002 CRITICAL Act Now

9.8 Feb 20

Configuration injection in OpenClaw Docker sandbox before 2026.2.15 allows escaping sandbox restrictions. Patch availabl

Same weakness CWE-1390 – Weak Authentication

View all

CVE-2025-40552 CRITICAL POC

9.8

CVE-2025-40554 CRITICAL POC

9.8

CVE-2026-55040 CRITICAL

9.1

CVE-2024-34451 CRITICAL POC

9.1

CVE-2024-36787 HIGH POC

8.8

CVE-2024-0822 HIGH POC

7.5

CVE-2025-30412 CRITICAL

10.0

CVE-2025-30411 CRITICAL

10.0

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2012-1723 CRITICAL POC

9.8

CVE-2017-10271 HIGH POC

7.5

CVE-2015-1427 CRITICAL POC

9.8

CVE-2025-3248 CRITICAL POC

9.8

Vendor StatusVendor

SUSE

Severity: Low

Product	Status
SUSE Liberty Linux 8	Fixed
SUSE Liberty Linux 9	Fixed

CVE-2025-24070 vulnerability details – vuln.today

Back

.NET CVE-2025-24070

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

More in .NET

Same weakness CWE-1390 – Weak Authentication

Same technique Authentication Bypass

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code