CVE-2020-0905 - An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics

CVE-2020-0905

Summary

An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0905

Vulnerable Configurations

cpe:2.3:a:microsoft:dynamics_365_business_central:-:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_365_business_central:-:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_365_business_central:2019:release_wave_2:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_365_business_central:2019:release_wave_2:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_365_business_central:2019:spring_update:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_365_business_central:2019:spring_update:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2013:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2013:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2015:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2015:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2016:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2016:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2017:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2017:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2018:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:dynamics_nav:2018:*:*:*:*:*:*:*

CVSS

Base:	6.0 (as of 17-03-2020 - 15:14)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:S/C:P/I:P/A:P

refmap via4

misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0905

Last major update

17-03-2020 - 15:14

Published

12-03-2020 - 16:15

Last modified

17-03-2020 - 15:14