PT-2024-5492 · Microsoft · Dynamics 365 Field Service On-Premises

Cameron Vincent · Published 2024-06-12 · Updated 2025-11-14 · CVE-2024-38182

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Field Service On-Premises version 7

Description The issue is related to weak authentication in Microsoft Dynamics 365, allowing an unauthenticated attacker to elevate privileges over a network. This can enable a remote attacker to gain unauthorized access.

Recommendations For Microsoft Dynamics 365 Field Service On-Premises version 7, patch immediately to mitigate the risk. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-1390

Related Identifiers

BDU:2024-06141

CVE-2024-38182

Affected Products

Dynamics 365 Field Service On-Premises

References · 15

• https://osv.dev/vulnerability/CVE-2024-38182 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06141 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38182 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38182 · Security Note
• https://learn.microsoft.com/en-us/dynamics/s-e/365enterprise/365fieldservice7_delta · Note
• https://twitter.com/Aptallar09/status/1823188018955506085 · Twitter Post
• https://t.me/cvenotify/88251 · Telegram Post
• https://twitter.com/oktsec/status/1823135952547541119 · Twitter Post
• https://t.me/cvenotify/88138 · Telegram Post
• https://t.me/cvedetector/2191 · Telegram Post
• https://t.me/cvenotify/90419 · Telegram Post
• https://vuldb.com/ru/?id.273306 · Note
• https://cmdsoft.ru/platforms/microsoft-dynamics-365 · Note
• https://t.me/cveNotify/142860 · Telegram Post
• https://t.me/cvenotify/88447 · Telegram Post