What is CVE-2021-42316?

CVE-2021-42316 is a security advisory published by Microsoft Security Response Center (MSRC) with Critical severity. Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Which CVE IDs does CVE-2021-42316 cover?

CVE-2021-42316 covers the following CVE IDs: CVE-2021-42316. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-42316?

CVE-2021-42316 has a CVSS v3 base score of 8.8, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-42316?

CVE-2021-42316 affects 2 products, including: Microsoft Dynamics 365 (on-premises) version 9.0; Microsoft Dynamics 365 (on-premises) version 9.1.

CVE-2021-42316CriticalCVSS 8.8

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

November 9, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-42316 →

📋 Description

What privileges could an attacker gain with successful exploitation of this vulnerability? An attacker can write to any file where the webserver user (nt authority\network service) has write access.

🎯 Affected products2

Microsoft Dynamics 365 (on-premises) version 9.0
Microsoft Dynamics 365 (on-premises) version 9.1

✅ Remediation

KB5008478 (Security Update) — fixed build 9.1.6.3 KB5008479 (Security Update) — fixed build 9.0.34.5

🔗 References (5)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42316
patchhttps://www.microsoft.com/en-us/download/details.aspx?id=103648
referencehttps://support.microsoft.com/help/5008478
patchhttps://www.microsoft.com/en-us/download/details.aspx?id=103647
referencehttps://support.microsoft.com/help/5008479