PT-2014-5702 · Microsoft · .Net Framework

Published 1999-01-01 · Updated 2018-10-12 · CVE-2014-4149

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.1 SP1 through 4.5.2

Description The issue arises from improper TypeFilterLevel checks, allowing remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint. This is an elevation of privilege vulnerability that exists in the way that .NET Framework handles TypeFilterLevel checks for some malformed objects. An attacker who successfully exploits this could take complete control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft .NET Framework versions 1.1 SP1 through 4.5.2, consider disabling .NET Remoting endpoints until a patch is available to prevent exploitation. Restrict access to sensitive data and systems to minimize the risk of privilege elevation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-4149

DOTNETREMOTINGCHECK

Affected Products

.Net Framework

References · 28

• 🔥 https://github.com/tyranid/ExploitRemotingService · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-27816 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-53915 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-27460 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-28072 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-35971 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-4149 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-44678 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-32499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34394 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58384 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34414 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4149 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34153 · Security Note