CVE-2024-35249HighCVSS 8.8
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.
🎯 Affected products3
- Microsoft Dynamics 365 Business Central 2023 Release Wave 1
- Microsoft Dynamics 365 Business Central 2023 Release Wave 2
- Microsoft Dynamics 365 Business Central 2024 Release Wave 1
✅ Remediation
KB5038531 (Security Update) — fixed build 24.0.19487 KB5038529 (Security Update) — fixed build 22.0.64336 KB5038530 (Security Update) — fixed build 23.0.18933
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35249
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=106062
- referencehttp://support.microsoft.com/kb/5038531
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=106031
- referencehttp://support.microsoft.com/kb/5038529
- patchhttps://www.microsoft.com/en-us/download/details.aspx?id=106032
- referencehttp://support.microsoft.com/kb/5038530