PT-2019-4636 · Progress · Telerik Ui For Asp.Net Ajax

Bao7Uo + 1 · Published 2019-12-11 · Updated 2026-04-09 · CVE-2019-18935

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Progress Telerik UI for ASP.NET AJAX versions prior to 2020.1.114

Description The issue concerns the deserialization of untrusted data, allowing for remote code execution. This has been exploited by multiple threat actors, including a nation-state group, to breach a U.S. federal agency's web server. The estimated number of potentially affected devices worldwide is not specified. Technical details include the exploitation of insecure deserialization in Telerik UI. API endpoints and specific variables are not explicitly mentioned.

Recommendations As a temporary workaround, consider disabling the deserialization of untrusted data in Progress Telerik UI for ASP.NET AJAX until a patch is available. Restrict access to vulnerable components to minimize the risk of exploitation. For versions prior to 2020.1.114, update to version 2020.1.114 or later to resolve the issue. At the moment, there is no information about additional mitigation measures.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2020-00797

CVE-2019-18935

ZDI-25-468

Affected Products

Telerik Ui For Asp.Net Ajax

References · 55

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/telerik_rau_deserialization.rb · Exploit
• 🔥 https://github.com/noperator/CVE-2019-18935 · Exploit
• 🔥 https://github.com/bao7uo/RAU_crypto · Exploit
• 🔥 https://github.com/ThanHuuTuan/Telerik_CVE-2019-18935 · Exploit
• 🔥 https://github.com/murataydemir/CVE-2019-18935 · Exploit
• 🔥 https://github.com/dust-life/CVE-2019-18935-memShell · Exploit
• 🔥 https://github.com/random-robbie/CVE-2019-18935 · Exploit
• 🔥 https://know.bishopfox.com/research/cve-2019-18935-remote-code-execution-in-telerik-ui · Exploit
• 🔥 https://exploit-db.com/exploits/47793 · Exploit
• 🔥 http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-18935 · Security Note
• https://telerik.com/support/whats-new/release-history · Vendor Advisory
• https://telerik.com/support/kb/aspnet-ajax/details/allows-javascriptserializer-deserialization · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-18935 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00797 · Security Note