CVE-2021-27040

🗓️ 25 Jun 2021 12:41:07Reported by autodeskType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 89 Views

A maliciously crafted DWG file can cause boundary read and code execution

Reporter	Title	Published	Views	Family All 22
BDU FSTEC	Vulnerability of software for modeling, design, and drawing in AutoCAD, related to data writing beyond the buffer, allowing a perpetrator to execute arbitrary code	20 Jul 202100:00	–	bdu_fstec
CNNVD	Autodesk AutoCAD 缓冲区错误漏洞	22 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-27040	25 Jun 202112:41	–	cvelist
EUVD	EUVD-2021-13811	7 Oct 202500:30	–	euvd
ICS	ICONICS GENESIS64 and Mitsubishi Electric MC Works64	21 Oct 202100:00	–	ics
NCSC	Vulnerabilities fixed in Autodesk products	22 Jun 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Autodesk products	4 Mar 202200:00	–	ncsc
NVD	CVE-2021-27040	25 Jun 202113:15	–	nvd
OSV	CVE-2021-27040	25 Jun 202113:15	–	osv
Prion	Code injection	25 Jun 202113:15	–	prion

NVD

Node

autodesk advance_steelRange2019–2019.1.3

autodesk advance_steelRange2020–2020.1.4

autodesk advance_steelRange2021–2021.1.1

autodesk advance_steelRange2022–2022.0.1

autodesk autocadRange2019–2019.1.3

autodesk autocadRange2020–2020.1.4

autodesk autocadRange2021–2021.1.1

autodesk autocadRange2022–2022.0.1

autodesk autocad_architectureRange2019–2019.1.3

autodesk autocad_architectureRange2020–2020.1.4

autodesk autocad_architectureRange2021–2021.1.1

autodesk autocad_architectureRange2022–2022.0.1

autodesk autocad_electricalRange2019–2019.1.3

autodesk autocad_electricalRange2020–2020.1.4

autodesk autocad_electricalRange2021–2021.1.1

autodesk autocad_electricalRange2022–2022.0.1

autodesk autocad_ltRange2019–2019.1.3

autodesk autocad_ltRange2020–2020.1.4

autodesk autocad_ltRange2021–2021.1.1

autodesk autocad_ltRange2022–2022.0.1

autodesk autocad_map_3dRange2019–2019.1.3

autodesk autocad_map_3dRange2020–2020.1.4

autodesk autocad_map_3dRange2021–2021.1.1

autodesk autocad_map_3dRange2022–2022.0.1

autodesk autocad_mechanicalRange2019–2019.1.3

autodesk autocad_mechanicalRange2020–2020.1.4

autodesk autocad_mechanicalRange2021–2021.1.1

autodesk autocad_mechanicalRange2022–2022.0.1

autodesk autocad_mepRange2019–2019.1.3

autodesk autocad_mepRange2020–2020.1.4

autodesk autocad_mepRange2021–2021.1.1

autodesk autocad_mepRange2022–2022.0.1

autodesk autocad_plant_3dRange2019–2019.1.3

autodesk autocad_plant_3dRange2020–2020.1.4

autodesk autocad_plant_3dRange2021–2021.1.1

autodesk autocad_plant_3dRange2022–2022.0.1

autodesk civil_3dRange2019–2019.1.3

autodesk civil_3dRange2020–2020.1.4

autodesk civil_3dRange2021–2021.1.1

autodesk civil_3dRange2022–2022.0.1

autodesk dwg_trueviewRange2022–2022.1.1

Node

iconics genesis64Range≤10.97

Node

mitsubishielectric mc_works64Range≤4.04e

[
  {
    "product": "Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2022, 2021, 2020, 2019"
      }
    ]
  }
]

Source	Link
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2021-0004
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1236/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1238/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-473/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-378/

21 Nov 2024 05:57Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.13.3

CVSS 24.3

EPSS0.00332

CWE-125