High WID-SEC-2022-2306 1 CVE

Microsoft Dynamics: Schwachstelle ermöglichen Codeausführung

Published Dec 13, 2022 · Updated Dec 13, 2022 · de-DE

Vendor: Microsoft Product: Dynamics 365 Product: Dynamics 365 Business Central 2019 Release Wave 2 Product: Dynamics 365 Business Central 2020 Release Wave 1 Product: Dynamics 365 Business Central 2020 Release Wave 2 Product: Dynamics 365 Business Central 2021 Release Wave 1 Product: Dynamics 365 Business Central 2021 Release Wave 2 Product: Dynamics 365 Business Central 2022 Release Wave 1 Product: Dynamics 365 Business Central 2022 Release Wave 2 Product: Dynamics 365 Business Central Spring 2019 Update Product: Dynamics NAV 2016 Product: Dynamics NAV 2017 Product: Dynamics NAV 2018 Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Microsoft Dynamics ausnutzen, um beliebigen Programmcode auszuführen.

Product

Microsoft Dynamics 365 ist eine All-in-One-Unternehmensmanagementlösung.
Microsoft Dynamics NAV ist eine Standardsoftware für ERP-Systeme.

Vulnerabilities 1

High 8.5

CVE-2022-41127

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Microsoft Microsoft Dynamics NAV 2018 Microsoft Dynamics NAV 2017 Microsoft Dynamics NAV 2015

Dec 13, 2022

Revision history

2022-12-13 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2022-12-13
https://msrc.microsoft.com/update-guide