QID 376165

QID 376165: Microsoft Bot Framework SDK Remote Code Execution (RCE) Vulnerability

The Bot Framework, along with the Azure Bot Service, provides tools to build, test, deploy, and manage intelligent bots, all in one place. The Bot Framework includes a modular and extensible SDK for building bots, as well as tools, templates, and related AI services.
Bot Framework SDK is prone to Remote Code Execution (RCE) Vulnerability.

Affected Software:
Bot Framework SDK for .NET Framework

Successful exploitation allows attacker to execute arbitrary code.

CVSS V3 rated as Critical - 9.8 severity.

CVSS V2 rated as High - 7.5 severity.

Solution

Users are advised to check CVE-2021-43225 for more information.

Vendor References

CVE-2021-43225 - msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43225

CVEs related to QID 376165

CVE-2021-43225 |

Software Advisories

Advisory ID	Software	Component	Link
CVE-2021-43225			msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43225

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].