Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12504
HistoryApr 12, 2022 - 12:00 a.m.

KLA12504 Remote code execution vulnerability in Microsoft Dynamics

2022-04-1200:00:00
Kaspersky Lab
threats.kaspersky.com
42

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.7%

JSON

A remote code execution vulnerability was found in Microsoft Dynamics 365. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

CVE-2022-23259

Related products

Microsoft-Dynamics-365

CVE list

CVE-2022-23259 critical

KB list

5012731

5012732

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

  • Microsoft Dynamics 365 9.0Microsoft Dynamics 365 9.1

Related

cvelist 1
mscve 1
nessus 1
nvd 1
cve 1
cnvd 1
prion 1
mskb 2
thn 1
qualysblog 1
threatpost 1
rapid7blog 1
cvelist
cvelist
CVE-2022-23259 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
2022-04-15 19:02:52
mscve
mscve
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
2022-04-12 07:00:00
nessus
nessus
Security Updates for Microsoft Dynamics 365 (on-premises) (April 2022)
2022-04-14 00:00:00
nvd
nvd
CVE-2022-23259
2022-04-15 19:15:09
cve
cve
CVE-2022-23259
2022-04-15 19:15:09
cnvd
cnvd
Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability
2022-04-15 00:00:00
prion
prion
Remote code execution
2022-04-15 19:15:00
mskb
mskb
Service Update 037 for Microsoft Dynamics CRM (on-premises) 9.0
2022-04-12 07:00:00
Service Update 1.9 for Microsoft Dynamics CRM (on-premises) 9.1
2022-04-12 07:00:00
thn
thn
Microsoft Issues Patches for 2 Windows Zero-Days and 126 Other Vulnerabilities
2022-04-13 03:22:00
qualysblog
qualysblog
April 2022 Patch Tuesday: Microsoft Releases 145 Vulnerabilities with 10 Critical; Adobe Releases 4 Advisories, 78 Vulnerabilities with 51 Critical.
2022-04-12 20:07:30
threatpost
threatpost
Microsoft Zero-Days, Wormable Bugs Spark Concern
2022-04-12 20:00:54
rapid7blog
rapid7blog
Patch Tuesday - April 2022
2022-04-12 18:48:11

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.7%

JSON
Related for KLA12504
cvelist1mscve1nessus1nvd1cve1cnvd1prion1mskb2thn1qualysblog1threatpost1rapid7blog1