The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software server, related to input data processing errors, allows a hacker to execute arbitrary code.

🗓️ 02 Sep 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Remote arbitrary code execution due to input data processing errors in Microsoft Dynamics 365 for Finance and Operations server.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	DejaBlue, RDP Heap Overflow	14 Aug 201900:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others	30 Aug 202022:13	–	avleonov
CVE	CVE-2020-1182	17 Aug 202019:12	–	cve
Cvelist	CVE-2020-1182 Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability	17 Aug 202019:12	–	cvelist
Kaspersky	KLA11936 ACE vulnerability in Microsoft Dynamics	12 Aug 202000:00	–	kaspersky
Microsoft CVE	Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability	12 Aug 202007:00	–	mscve
NVD	CVE-2020-1182	17 Aug 202019:15	–	nvd
OSV	CVE-2020-1182	17 Aug 202019:15	–	osv
Prion	Remote code execution	17 Aug 202019:15	–	prion
Positive Technologies	PT-2020-3765 · Microsoft · Dynamics 365 For Finance/Operations	17 Aug 202000:00	–	ptsecurity

Vulners

Node

microsoft microsoft_dynamics_365_for_finance_and_operationsMatch10.0.11

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1182
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-1182
web	www.web.nvd.nist.gov/view/vuln/detail

02 Sep 2020 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 38

CVSS 29

EPSS0.02765

Microsoft Dynamics 365 Finance and Operations input data processing remote code execution server vulnerability