KLA11683
ACE vulnerability in Microsoft Dynamics

Updated: 06/03/2020
Detect date
?
03/10/2020
Severity
?
Critical
Description

ACE vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code.

Affected products

Microsoft Dynamics NAV 2015
Microsoft Dynamics NAV 2017
Microsoft Dynamics NAV 2016
Microsoft Dynamics 365 BC On Premise
Dynamics 365 Business Central 2019 Spring Update
Microsoft Dynamics NAV 2013
Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise)
Microsoft Dynamics NAV 2018

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2020-0905

Impacts
?
ACE 
[?]
Related products
Microsoft Dynamics 365
CVE-IDS
?
KB list

4538885
4538886
4538884
4538888
4551259
4538708
4551258
4538887

Microsoft official advisories
Microsoft Security Update Guide
Find out the statistics of the vulnerabilities spreading in your region