CVEs-PoC/2017/CVE-2017-0248.md

### [CVE-2017-0248](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0248)
![](https://img.shields.io/static/v1?label=Product&message=Microsoft%20.NET%20Framework&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=Microsoft%20.NET%20Framework%202.0%2C%203.5%2C%203.5.1%2C%204.5.2%2C%204.6%2C%204.6.1%2C%204.6.2%20and%204.7%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Security%20Feature%20Bypass&color=brightgreen)

### Description

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/jnewman-sonatype/DotNetTest
- https://github.com/rubenmamo/CVE-2017-0248-Test
- https://github.com/shiftingleft/dotnet-scm-test