CVE-2025-55248

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.8 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
microsoftCNA
4.8 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 7%
VendorProductVersion
microsoft.net_framework
4.6.2
microsoft.net_framework
4.7
microsoft.net_framework
4.7.1
microsoft.net_framework
4.7.2
microsoft.net_framework
4.6.2
microsoft.net_framework
3.5.1
microsoft.net_framework
3.5
microsoft.net_framework
4.8.1
microsoft.net_framework
3.5
microsoft.net_framework
4.8
microsoft.net_framework
3.5
microsoft.net_framework
4.7.2
microsoft.net_framework
3.5
microsoft.net_framework
3.0:sp2
microsoft.net
8.0.0 ≤
𝑥
< 8.0.21
microsoft.net
9.0.0 ≤
𝑥
< 9.0.10
microsoftvisual_studio_2022
17.10.0 ≤
𝑥
< 17.10.20
microsoftvisual_studio_2022
17.12.0 ≤
𝑥
< 17.12.13
microsoftvisual_studio_2022
17.14.0 ≤
𝑥
< 17.14.17
microsoft.net_framework
4.8
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dotnet6
questing
dne
plucky
dne
noble
dne
jammy
deferred
focal
dne
bionic
dne
xenial
dne
trusty
dne
dotnet7
questing
dne
plucky
dne
noble
dne
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
dotnet8
questing
Fixed 8.0.121-8.0.21-0ubuntu1~25.10.1
released
plucky
Fixed 8.0.121-8.0.21-0ubuntu1~25.04.1
released
noble
Fixed 8.0.121-8.0.21-0ubuntu1~24.04.1
released
jammy
Fixed 8.0.121-8.0.21-0ubuntu1~22.04.1
released
focal
dne
bionic
dne
xenial
dne
trusty
dne
dotnet9
questing
Fixed 9.0.111-9.0.10-0ubuntu1~25.10.1
released
plucky
Fixed 9.0.111-9.0.10-0ubuntu1~25.04.1
released
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
dotnet10
questing
not-affected
plucky
dne
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne