The vulnerabilities of the ASMKERN228A.dll and ASMdatax229A.dll libraries, which are software components for modeling, design, and drawing in AutoCAD, allow a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

🗓️ 11 Nov 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

ASMKERN228A.dll and ASMdatax229A.dll flaws allow unauthorized access and code execution.

Reporter	Title	Published	Views	Family All 22
Tenable Nessus	Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0004)	28 Mar 202400:00	–	nessus
Tenable Nessus	Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0009)	7 Jun 202400:00	–	nessus
Circl	CVE-2024-0446	22 Feb 202401:26	–	circl
CNNVD	Autodesk AutoCAD Buffer Error Vulnerability	21 Feb 202400:00	–	cnnvd
CVE	CVE-2024-0446	21 Feb 202423:16	–	cve
Cvelist	CVE-2024-0446 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software	21 Feb 202423:16	–	cvelist
EUVD	EUVD-2024-16241	3 Oct 202520:07	–	euvd
NVD	CVE-2024-0446	22 Feb 202400:15	–	nvd
OSV	CVE-2024-0446	22 Feb 202400:15	–	osv
Prion	Out-of-bounds	22 Feb 202400:15	–	prion

Vulners

Node

autodesk autodesk_advance_steelMatch2022

autodesk autodesk_advance_steelMatch2021

autodesk autocadMatch2022

autodesk autocadMatch2021

autodesk autocad_architectureMatch2022

autodesk autocad_architectureMatch2021

autodesk autocad_electricalMatch2022

autodesk autocad_electricalMatch2021

autodesk autocad_map_3dMatch2022

autodesk autocad_map_3dMatch2021

autodesk autocad_mechanicalMatch2022

autodesk autocad_mechanicalMatch2021

autodesk autocad_mepMatch2022

autodesk autocad_mepMatch2021

autodesk autocad_plant_3dMatch2022

autodesk autocad_plant_3dMatch2021

autodesk autodesk_civil_3dMatch2022

autodesk autodesk_civil_3dMatch2021

autodesk autocadMatch2023

autodesk autocadMatch2024

autodesk autocad_architectureMatch2023

autodesk autocad_architectureMatch2024

autodesk autocad_electricalMatch2023

autodesk autocad_electricalMatch2024

autodesk autocad_map_3dMatch2023

autodesk autocad_map_3dMatch2024

autodesk autocad_mechanicalMatch2023

autodesk autocad_mechanicalMatch2024

autodesk autocad_mepMatch2023

autodesk autocad_mepMatch2024

autodesk autocad_plant_3dMatch2023

autodesk autocad_plant_3dMatch2024

autodesk autodesk_civil_3dMatch2023

autodesk autodesk_civil_3dMatch2024

autodesk autodesk_advance_steelMatch2023

autodesk autodesk_advance_steelMatch2024

autodesk autocadMatch2025

autodesk autocad_architectureMatch2025

autodesk autocad_electricalMatch2025

autodesk autocad_mechanicalMatch2025

autodesk autocad_mepMatch2025

autodesk autocad_plant_3dMatch2025

autodesk autodesk_civil_3dMatch2025

autodesk autodesk_advance_steelMatch2025

autodesk autocad_map_3dMatch2025

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-742/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-723/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-710/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-701/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-163/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-146/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-124/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-125/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024061702
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002

11 Nov 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 27.2

CVSS 37.8

EPSS0.00459