PT-2025-42009 · Microsoft+8 · .Net Framework+9

CVE-2025-55248 · Publicado 2025-10-14 · Atualizado 2026-02-17

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, Visual Studio (affected versions not specified)

Description An issue with encryption strength exists in .NET, .NET Framework, and Visual Studio. This can allow an attacker who is already authorized to disclose information over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

ALSA-2025:18148

ALSA-2025:18149

ALSA-2025:18150

ALSA-2025:18151

ALSA-2025:18152

ALSA-2025:18153

ALT-PU-2025-13074

ALT-PU-2025-13075

ALT-PU-2025-13670

ALT-PU-2025-13674

BDU:2025-13257

BIT-DOTNET-2025-55248

BIT-DOTNET-SDK-2025-55248

CESA-2025_18148

CESA-2025_18150

CVE-2025-55248

GHSA-987X-96FQ-9384

GHSA-GWQ6-FMVP-QP68

INFSA-2025_18148

INFSA-2025_18149

INFSA-2025_18150

INFSA-2025_18151

RHSA-2025_18148

RHSA-2025_18149

RHSA-2025_18150

RHSA-2025_18151

RHSA-2026:9080

RHSA-2026:9205

USN-7822-1

Produtos afetados

.Net Framework

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Ubuntu

Visual Studio

Referências · 63

• https://github.com/dotnet/runtime · Nota
• https://github.com/dotnet/runtime/security/advisories/GHSA-gwq6-fmvp-qp68 · Nota
• https://github.com/dotnet/runtime/issues/120713 · Nota
• https://github.com/dotnet/announcements/issues/372 · Nota
• https://errata.rockylinux.org/RLSA-2025:18148 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALSA-2025:18148 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2025-55247 · Nota
• https://errata.almalinux.org/10/ALSA-2025-18153.html · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-55248 · Aviso do Fabricante
• https://reddit.com/r/VulnMatter/comments/1o87w9u/resumen_diario_de_vulnerabilidades_16102025 · Publicação no Reddit
• https://access.redhat.com/errata/RHSA-2025:18151 · Nota
• https://linux.oracle.com/errata/ELSA-2025-18150.html · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2025-55248 · Nota de Segurança
• https://errata.rockylinux.org/RLSA-2025:18149 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2025:18153 · Nota