VULNERABILITY INTELLIGENCE
CVE-2014-4149
CVSS score9.3 HIGH
EPSS probability21.44%
CISA KEVNot currently listed
Published2014-11-11
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint, aka "TypeFilterLevel Vulnerability."
Weakness classification
- CWE-20: Improper Input Validation