Description
.NET Remoting is a Microsoft technology for interprocess communication. Acunetix detected a .NET Remoting over HTTP endpoint on the web application. The technology depends on SoapFormater serialization mechanism which is vulnerable to deserialization attack by default.
Remediation
Restrict access to the .NET Remoting endpoint.
References
Related Vulnerabilities
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-20330)
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.34)
Kentico CMS Deserialization RCE
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2024-38023)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-14892)