CVE-2024-28252 | .NET Core - CoreWCF Operational Intel

Executive Risk Summary

"A vulnerability in CoreWCF could allow an attacker to consume extra system resources by leaving connections established instead of closing or aborting them. This can happen in two scenarios: when a client establishes a connection and sends no data, and when a client establishes a session but doesn't send any requests within the configured ReceiveTimeout period."

Operational Audit Arsenal

Target Type DLL

Target Asset CoreWCF.dll

Standard Path %ProgramFiles%\CoreWCF

PowerShell

# 🛠️ Senior Engineer Universal Audit
# Target: CoreWCF.dll (DLL)
$Targets = 'CoreWCF.dll'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}