Lucene search

K
kasperskyKaspersky LabKLA10606
HistoryJan 14, 2014 - 12:00 a.m.

KLA10606 Denial of service vulnerability in Microsoft Dynamics AX

2014-01-1400:00:00
Kaspersky Lab
threats.kaspersky.com
22

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.029

Percentile

90.8%

An unspecified vulnerability was found in Dynamics AX. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed data.

Original advisories

CVE-2014-0261

Related products

Microsoft-Dynamics-AX

CVE list

CVE-2014-0261 warning

KB list

2914057

2914055

2920510

2880826

2914058

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Microsoft Dynamics AX 4.0 Service Pack 2Microsoft Dynamics AX 2009 Service Pack 1Microsoft Dynamics AX 2012Microsoft Dynamics AX 2012 R2

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.029

Percentile

90.8%