Several vulnerabilities targeted the ASP.NET subsystem, compromising user identity and data integrity. Forms Authentication Bypass (CVE-2011-3416):

Treat any system reporting 4.0.30319 as a critical finding requiring immediate remediation.

An e-commerce site still runs on Windows Server 2008 R2 with .NET 4.0.30319. An attacker performs a padding oracle scan, identifies CVE-2010-3332 behavior, and extracts the machineKey . Within minutes, they generate a valid admin session cookie and deface the website.