Research shows a .NET proxy design flaw enables file writes and RCE through attacker-supplied WSDL in multiple products.