CVE-2024-35249

Summary

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft Dynamics 365 Business Central 2024 Release Wave 124.0 < Application Build 24.1.19498, Platform Build 24.0.affected
MicrosoftMicrosoft Dynamics 365 Business Central 2023 Release Wave 122.0.0 < Application Build 22.13.64344, Platform Build 22.0affected
MicrosoftMicrosoft Dynamics 365 Business Central 2023 Release Wave 223.0.0 < Application Build 23.7.18957, Platform Build 23.0.affected

Weaknesses

  • CWE-502: CWE-502: Deserialization of Untrusted Data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References