# CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

- Page: https://www.vulneraibility.com/cve/CVE-2020-1147
- CVSS: 7.8
- Known exploited: yes, in CISA KEV since 2021-11-03; CISA due date 2022-05-03
- EPSS: 95.80% (percentile 99.9)
- Public exploit code: 2 on Exploit-DB · 1 Metasploit module (first 2020-08-17)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-02-04)
- Published: 2020-07-14

## Affected versions

- Microsoft Microsoft .NET Framework 2.0: affected Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2; Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
- Microsoft Microsoft .NET Framework 3.0: affected Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2; Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
- Microsoft Microsoft .NET Framework 3.5: affected Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation)
- Microsoft Microsoft .NET Framework 3.5.1: affected Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1
- Microsoft Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation): affected 1903
- Microsoft Microsoft .NET Framework 4.5.2: affected Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows RT 8.1; Windows Server 2008 for 32-bit Systems Service Pack 2; Windows Server 2008 for x64-based Systems Service Pack 2; Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation)
- Microsoft Microsoft .NET Framework 4.6: affected Windows Server 2008 for 32-bit Systems Service Pack 2; Windows Server 2008 for x64-based Systems Service Pack 2
- Microsoft Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2: affected Windows 7 for 32-bit Systems Service Pack 1; Windows 7 for x64-based Systems Service Pack 1; Windows 8.1 for 32-bit systems; Windows 8.1 for x64-based systems; Windows RT 8.1; Windows Server 2008 R2 for x64-based Systems Service Pack 1; Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation); Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation)
- Microsoft Microsoft SharePoint Enterprise Server: affected 2016; 2013 Service Pack 1
- Microsoft Microsoft SharePoint Server: affected 2019; 2010 Service Pack 2
- Microsoft Microsoft Visual Studio 2019: affected 16.0
- Microsoft .NET Core: affected 2.1; 3.1

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147
- [other] http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html
- [other] http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html
- [other] https://www.exploitalert.com/view-details.html?id=35992
- [other] http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.