Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). Can the exploit move from Dynamics NAV to the underlying operating system?
Yes. An attacker who successfully exploited this vulnerability in Dynamics NAV could execute code on the host server in the context of the service account Dynamics has been configured to use.

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
The attacker must be authenticated to be able to exploit this vulnerability.

According to the CVSS metric, the attack vector is network (AV:N). What is the target used in the context of the remote code execution?
The Dynamics NAV opened port could be used to connect with the WCF TCP protocol. As an authenticated user, the attacker could attempt to trigger malicious code in the context of the server's account through a network call.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.

Security updates
Build 52203 — https://support.microsoft.com/en-us/help/5005293
Build 30712 — https://support.microsoft.com/en-us/help/5010202
Build 49497 — https://support.microsoft.com/en-us/help/5021668
52204 — https://Released Cumulative Updates for Microsoft Dynamics NAV 2015 - Microsoft Support
App Build 14.43.49498, Platform Build 14.0.49494 — https://support.microsoft.com/en-us/help/5021669
App Build 15.17.48428, Platform Build 15.0.48 — https://support.microsoft.com/en-us/help/5001733
App Build 17.17.38111, Platform Build 17.0.38061 — https://support.microsoft.com/en-us/help/5013420
App Build 16.19.35126, Platform Build 16.35120 — https://support.microsoft.com/en-us/help/5010910
App Build 20.8.49971, Platform Build 20.0.49947 — https://support.microsoft.com/en-us/help/5021671
App Build 19.14.49970, Platform Build 19.0.49925 — https://support.microsoft.com/en-us/help/5021670
App Build 21.2.49990, Platform Build 21.0.49984 — https://support.microsoft.com/en-us/help/5021672
App Build 18.18.46920, Platform Build 18.0.46905 — https://support.microsoft.com/en-us/help/5019239
52297 — https://support.microsoft.com/en-us/topic/released-cumulative-updates-for-microsoft-dynamics-nav-2013-r2-c7f39bba-e9b2-51ac-5028-0a31b1ed6996