MS.SharePoint.WebPartPages.TypeConverter.Remote.Code.Execution

Description

This indicates an attack attempt to exploit a Remote Code Execution Vulnerability in Microsoft SharePoint Server.
The vulnerability is due to lack of validation of property Types when parsing the XML configuration of WebParts. A remote attacker could exploit this vulnerability by creating and invoking a specially crafted Web Part. Successful exploitation results in the execution of arbitrary code in the context of service account.

Affected Products

Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft SharePoint Server 2019

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0932

References