PT-2019-4636 · Progress · Telerik Ui For Asp.Net Ajax

Bao7Uo + 1 · Publicado 2019-12-11 · Atualizado 2026-04-09 · CVE-2019-18935

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Progress Telerik UI for ASP.NET AJAX versions prior to 2020.1.114

Description The issue concerns the deserialization of untrusted data, allowing for remote code execution. This has been exploited by multiple threat actors, including a nation-state group, to breach a U.S. federal agency's web server. The estimated number of potentially affected devices worldwide is not specified. Technical details include the exploitation of insecure deserialization in Telerik UI. API endpoints and specific variables are not explicitly mentioned.

Recommendations As a temporary workaround, consider disabling the deserialization of untrusted data in Progress Telerik UI for ASP.NET AJAX until a patch is available. Restrict access to vulnerable components to minimize the risk of exploitation. For versions prior to 2020.1.114, update to version 2020.1.114 or later to resolve the issue. At the moment, there is no information about additional mitigation measures.

Exploit

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

BDU:2020-00797

CVE-2019-18935

ZDI-25-468

Produtos afetados

Telerik Ui For Asp.Net Ajax

Referências · 55

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/telerik_rau_deserialization.rb · Exploit
• 🔥 https://github.com/noperator/CVE-2019-18935 · Exploit
• 🔥 https://github.com/bao7uo/RAU_crypto · Exploit
• 🔥 https://github.com/ThanHuuTuan/Telerik_CVE-2019-18935 · Exploit
• 🔥 https://github.com/murataydemir/CVE-2019-18935 · Exploit
• 🔥 https://github.com/dust-life/CVE-2019-18935-memShell · Exploit
• 🔥 https://github.com/random-robbie/CVE-2019-18935 · Exploit
• 🔥 https://know.bishopfox.com/research/cve-2019-18935-remote-code-execution-in-telerik-ui · Exploit
• 🔥 https://exploit-db.com/exploits/47793 · Exploit
• 🔥 http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-18935 · Nota de Segurança
• https://telerik.com/support/whats-new/release-history · Aviso do Fabricante
• https://t.me/aptreports/21665 · Publicação no Telegram
• https://t.me/aptreports/5588 · Publicação no Telegram
• https://t.me/cvenotify/87396 · Publicação no Telegram