CSLA .NET Remote Code Execution Vulnerability via WcfProxy

A remote code execution vulnerability has been identified in CSLA .NET framework versions prior to 6.0.0. This issue arises from the use of WcfProxy, which relies on the now-obsolete NetDataContractSerializer (NDCS) for serialization. During the deserialization process, NDCS introduces a risk of executing malicious code. The vulnerability is present in versions 5.5.4 and below.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where the affected CSLA .NET application is running.

Remediation

To address this vulnerability, users should upgrade to CSLA .NET version 6.0.0 or later, where the issue has been resolved. If an upgrade is not possible, WcfProxy should be removed from the data portal configurations in versions prior to 6.0.0.