NCSC-TAD-2507-001
مستوى الخطورة: حرجة
ثغرة
الرقم المرجعي: NCSC-TAD-2507-001CVSS 0
Actively Exploited Vulnerability in Microsoft SharePoint Server
- نوع التهديد:
- غير متوفر
- مستوى المشاركة (TLP):
- CLEAR
- CVE:
- CVE-2025-53770
نظرة عامة
An attacker who can reach a vulnerable SharePoint server can run code without signing in. Successful exploitation can expose SharePoint signing keys, which attackers may use to regain access after the server is patched. Microsoft confirmed exploitation.
التقنيات المتأثرة
- Microsoft SharePoint Server
إجراءات الحد من المخاطر والإجراءات الفورية
- 01
Install the applicable Microsoft security update for your SharePoint Server edition.
- 02
Check for signs of compromise. After patching, rotate the SharePoint ASP.NET machine keys and restart IIS.