CVE-2024-35249

Summary

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft Dynamics 365 Business Central 2023 Release Wave 122.0.0 < 22.0.64336affected
MicrosoftMicrosoft Dynamics 365 Business Central 2023 Release Wave 223.0.0 < 23.0.18933affected
MicrosoftMicrosoft Dynamics 365 Business Central 2024 Release Wave 124.0 < 24.0.19487affected

Weaknesses

  • CWE-502: CWE-502: Deserialization of Untrusted Data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References