NET SOAPWN FLAW OPENS DOOR FOR FILE WRITES AND REMOTE CODE EXECUTION VIA ROGUE WSDL

Summary from the TLDR InfoSec newsletter

A .NET Framework design flaw, dubbed SOAPwn, allows attackers to weaponize WSDL-based SOAP client proxies to write arbitrary files or redirect SOAP requests to attacker-controlled locations. This can enable NTLM credential capture and remote code execution via web shells or malicious scripts. Impacted enterprise products include Barracuda Service Center RMM and Ivanti EPM, which have begun shipping security fixes.