CyberRota Analysis
AI-GeneratedThe CoreWCF NetNamedPipe transport in versions prior to 1.8.1 and 1.9.1 is vulnerable to local interception of NetNamedPipe traffic due to improper handling of named pipe instances, which can be exploited by an attacker during the startup phase. This vulnerability could allow unauthorized access to sensitive data transmitted over the named pipe. Organizations using affected versions of CoreWCF should prioritize upgrading to the patched versions to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF NetNamedPipe transport accepts attachment to a pre-existing named pipe instance, allowing local interception of NetNamedPipe traffic when an attacker races NamedPipeListener startup between shared memory GUID publication and service named pipe creation. This issue is fixed in versions 1.8.1 and 1.9.1.