H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productProgress Telerik UI for ASP.NET AJAX
Added2021-11-03
Due date2022-05-03
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2019-18935
open
cwe
CWE-502
open