Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to incorrect handling of exceptional states, allowing a perpetrator to execute arbitrary code.

🗓️ 26 Jun 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

AutoCAD has improper handling of exceptional states enabling code via crafted MODEL and SLDPRT

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-33886	3 Oct 202215:15	–	attackerkb
CNNVD	Autodesk AutoCAD 安全漏洞	3 Oct 202200:00	–	cnnvd
CVE	CVE-2022-33886	3 Oct 202200:00	–	cve
Cvelist	CVE-2022-33886	3 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-36924	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Autodesk AutoCAD and Design Review	29 Sep 202200:00	–	ncsc
NVD	CVE-2022-33886	3 Oct 202215:15	–	nvd
OSV	CVE-2022-33886	3 Oct 202215:15	–	osv
Prion	Code injection	3 Oct 202215:15	–	prion
Positive Technologies	PT-2022-6683 · Autodesk · Autodesk Autocad +1	22 Sep 202200:00	–	ptsecurity

Vulners

Node

autodesk autocadRange2023–2023.1.1

autodesk autocadRange2022–2022.1.3

autodesk autocadRange2021–2021.1.3

autodesk autocad_architectureRange2023–2023.1.1

autodesk autocad_electricalRange2023–2023.1.1

autodesk autocad_map_3dRange2023–2023.1.1

autodesk autocad_mechanicalRange2023–2023.1.1

autodesk autocad_architectureRange2022–2022.1.3

autodesk autocad_architectureRange2021–2021.1.3

autodesk autocad_electricalRange2022–2022.1.3

autodesk autocad_electricalRange2021–2021.1.3

autodesk autocad_map_3dRange2022–2022.1.3

autodesk autocad_map_3dRange2021–2021.1.3

autodesk autocad_mechanicalRange2022–2022.1.3

autodesk autocad_mechanicalRange2021–2021.1.3

autodesk autocad_mepRange2023–2023.1.1

autodesk autocad_mepRange2022–2022.1.3

autodesk autocad_mepRange2021–2021.1.3

autodesk autocad_plant_3dRange2023–2023.1.1

autodesk autocad_plant_3dRange2022–2022.1.3

autodesk autocad_plant_3dRange2021–2021.1.3

autodesk autocad_ltRange2023–2023.1.1

autodesk autocad_ltRange2022–2022.1.3

autodesk autocad_ltRange2021–2021.1.3

autodesk autocad_ltRange2020–2020.1.6

autodesk autodesk_civil_3dRange2023–2023.1.1

autodesk autodesk_civil_3dRange2022–2022.1.3

autodesk autodesk_civil_3dRange2021–2021.1.3

autodesk autodesk_advance_steelRange2023–2023.1.1

autodesk autodesk_advance_steelRange2022–2022.1.3

autodesk autodesk_advance_steelRange2021–2021.1.3

autodesk mayaRange2023–2023.3

autodesk mayaRange2022–2022.5

autodesk autocadRange2020–2020.1.6

autodesk autocad_architectureRange2020–2020.1.6

autodesk autocad_electricalRange2020–2020.1.6

autodesk autocad_map_3dRange2020–2020.1.6

autodesk autocad_mechanicalRange2020–2020.1.6

autodesk autocad_mepRange2020–2020.1.6

autodesk autocad_plant_3dRange2020–2020.1.6

autodesk autodesk_civil_3dRange2020–2020.1.6

autodesk autodesk_advance_steelRange2020–2020.1.6

Source	Link
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-100/
vuldb	www.vuldb.com/ru/
web	www.web.nvd.nist.gov/view/vuln/detail

05 Jun 2024 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 27.2

CVSS 37.8

EPSS0.00116