CVE-2022-41127
highPriorität · verfolgen · 1EPSS 0.017 · 77. PerzentilDEEURUUSEPSS · bewertet 2026-10-27
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenDynamics 365 Business Central 2019 Release Wave 2 (On-Premise)msrc_csaf
App Build 15.17.48428, Platform Build 15.0.48:Security Update:https://support.microsoft.com/en-us/help/5001733
https://support.microsoft.com/en-us/help/5001733 - BehobenDynamics 365 Business Central Spring 2019 Updatemsrc_csaf
App Build 14.43.49498, Platform Build 14.0.49494:Security Update:https://support.microsoft.com/en-us/help/5021669
https://support.microsoft.com/en-us/help/5021669 - BehobenMicrosoft Dynamics 365 Business Central 2020 Release Wave 1msrc_csaf
App Build 16.19.35126, Platform Build 16.35120:Security Update:https://support.microsoft.com/en-us/help/5010910
https://support.microsoft.com/en-us/help/5010910 - BehobenMicrosoft Dynamics 365 Business Central 2020 Release Wave 2msrc_csaf
App Build 17.17.38111, Platform Build 17.0.38061:Security Update:https://support.microsoft.com/en-us/help/5013420
https://support.microsoft.com/en-us/help/5013420 - BehobenMicrosoft Dynamics 365 Business Central 2021 Release Wave 1msrc_csaf
App Build 18.18.46920, Platform Build 18.0.46905:Security Update:https://support.microsoft.com/en-us/help/5019239
https://support.microsoft.com/en-us/help/5019239 - BehobenMicrosoft Dynamics 365 Business Central 2021 Release Wave 2msrc_csaf
App Build 19.14.49970, Platform Build 19.0.49925:Security Update:https://support.microsoft.com/en-us/help/5021670
https://support.microsoft.com/en-us/help/5021670 - BehobenMicrosoft Dynamics 365 Business Central 2022 Release Wave 1msrc_csaf
App Build 20.8.49971, Platform Build 20.0.49947:Security Update:https://support.microsoft.com/en-us/help/5021671
https://support.microsoft.com/en-us/help/5021671 - BehobenMicrosoft Dynamics 365 Business Central 2022 Release Wave 2msrc_csaf
App Build 21.2.49990, Platform Build 21.0.49984:Security Update:https://support.microsoft.com/en-us/help/5021672
https://support.microsoft.com/en-us/help/5021672 - BehobenMicrosoft Dynamics NAV 2013 R2msrc_csaf
52297:Security Update:https://support.microsoft.com/en-us/topic/released-cumulative-updates-for-microsoft-dynamics-nav-2013-r2-c7f39bba-e9b2-51ac-5028-0a31b1ed6996
https://support.microsoft.com/en-us/topic/released-cumulative-updates-for-microsoft-dynamics-nav-2013-r2-c7f39bba-e9b2-51ac-5028-0a31b1ed6996 - BehobenMicrosoft Dynamics NAV 2015msrc_csaf
52204:Security Update:https://Released Cumulative Updates for Microsoft Dynamics NAV 2015 - Microsoft Support
- BehobenMicrosoft Dynamics NAV 2016msrc_csaf
Build 52203:Security Update:https://support.microsoft.com/en-us/help/5005293
https://support.microsoft.com/en-us/help/5005293 - BehobenMicrosoft Dynamics NAV 2017msrc_csaf
Build 30712:Security Update:https://support.microsoft.com/en-us/help/5010202
https://support.microsoft.com/en-us/help/5010202 - BehobenMicrosoft Dynamics NAV 2018msrc_csaf
Build 49497:Security Update:https://support.microsoft.com/en-us/help/5021668
https://support.microsoft.com/en-us/help/5021668
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (68)
Betroffene Produkte und Versionsbereiche.
- Microsoft Dynamics 365 Business Central 2019 Release Wave 2alle Versionencert_bundDEcpe:/a:microsoft:dynamics_365:business_central_2019_release_wave_2
- Microsoft Dynamics 365 Business Central 2020 Release Wave 1alle Versionencert_bundDEcpe:/a:microsoft:dynamics_365:business_central_2020_release_wave_1
- Microsoft Dynamics 365 Business Central 2020 Release Wave 2alle Versionencert_bundDEcpe:/a:microsoft:dynamics_365:business_central_2020_release_wave_2
- Microsoft Dynamics 365 Business Central 2021 Release Wave 1alle Versionencert_bundDEcpe:/a:microsoft:dynamics_365:business_central_2021_release_wave_1
- Microsoft Dynamics 365 Business Central 2021 Release Wave 2alle Versionencert_bundDEcpe:/a:microsoft:dynamics_365:business_central_2021_release_wave_2
- Microsoft Dynamics 365 Business Central 2022 Release Wave 1alle Versionencert_bundDEcpe:/a:microsoft:dynamics_365:business_central_2022_release_wave_1
- Microsoft Dynamics 365 Business Central 2022 Release Wave 2alle Versionencert_bundDEcpe:/a:microsoft:dynamics_365:business_central_2022_release_wave_2
- Microsoft Dynamics 365 Business Central Spring 2019 Updatealle Versionencert_bundDEcpe:/a:microsoft:dynamics_365:business_central_spring_2019_update
- Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise)15.0.0 → App Build 15.17.48428, Platform Build 15.0.48enisa_euvdEU
- Microsoft Dynamics 365 Business Central Spring 2019 Update14.0.0 → App Build 14.43.49498, Platform Build 14.0.49494enisa_euvdEU
- Microsoft Microsoft Dynamics 365 Business Central 2020 Release Wave 116.0.0 → App Build 16.19.35126, Platform Build 16.35120enisa_euvdEU
- Microsoft Microsoft Dynamics 365 Business Central 2020 Release Wave 217.0.0 → App Build 17.17.38111, Platform Build 17.0.38061enisa_euvdEU
- Microsoft Microsoft Dynamics 365 Business Central 2021 Release Wave 118.0.0 → App Build 18.18.46920, Platform Build 18.0.46905enisa_euvdEU
- Microsoft Microsoft Dynamics 365 Business Central 2021 Release Wave 219.0.0 → App Build 19.14.49970, Platform Build 19.0.49925enisa_euvdEU
- Microsoft Microsoft Dynamics 365 Business Central 2022 Release Wave 120.0.0 → App Build 20.8.49971, Platform Build 20.0.49947enisa_euvdEU
- Microsoft Microsoft Dynamics 365 Business Central 2022 Release Wave 221.0.0 → App Build 21.2.49990, Platform Build 21.0.49984enisa_euvdEU
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2022-2306Microsoft Dynamics: Schwachstelle ermöglichen CodeausführungDeutsch2022-12-13csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Microsoft Dynamics ausnutzen, um beliebigen Programmcode auszuführen.
- msrc_CVE-2022-41127Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability2022-12-13csaf · msrc_csafUS
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (5)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2022-41127/cnnvd
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41127cnnvd
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41127cnnvd
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41127enisa_euvd
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41127nvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan