Lucene search

[email protected]CVE-2021-27040

HistoryJun 25, 2021 - 1:15 p.m.

CVE-2021-27040

2021-06-2513:15:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2021-27040

dwg file

code execution

boundary read

nvd

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.2%

JSON

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.

CPENameOperatorVersion
autodesk:advance_steelautodesk advance steellt2019.1.3
autodesk:advance_steelautodesk advance steellt2020.1.4
autodesk:advance_steelautodesk advance steellt2021.1.1
autodesk:advance_steelautodesk advance steellt2022.0.1
autodesk:autocadautodesk autocadlt2019.1.3
autodesk:autocadautodesk autocadlt2020.1.4
autodesk:autocadautodesk autocadlt2021.1.1
autodesk:autocadautodesk autocadlt2022.0.1
autodesk:autocad_architectureautodesk autocad architecturelt2019.1.3
autodesk:autocad_architectureautodesk autocad architecturelt2020.1.4

CPE	Name	Operator	Version
autodesk:advance_steel	autodesk advance steel	lt	2019.1.3
autodesk:advance_steel	autodesk advance steel	lt	2020.1.4
autodesk:advance_steel	autodesk advance steel	lt	2021.1.1
autodesk:advance_steel	autodesk advance steel	lt	2022.0.1
autodesk:autocad	autodesk autocad	lt	2019.1.3
autodesk:autocad	autodesk autocad	lt	2020.1.4
autodesk:autocad	autodesk autocad	lt	2021.1.1
autodesk:autocad	autodesk autocad	lt	2022.0.1
autodesk:autocad_architecture	autodesk autocad architecture	lt	2019.1.3
autodesk:autocad_architecture	autodesk autocad architecture	lt	2020.1.4

Rows per page:

1-10 of 431

References

www.autodesk.com/trust/security-advisories/adsk-sa-2021-0004

www.zerodayinitiative.com/advisories/ZDI-21-1236/

www.zerodayinitiative.com/advisories/ZDI-21-1238/

www.zerodayinitiative.com/advisories/ZDI-22-378/

www.zerodayinitiative.com/advisories/ZDI-22-473/

Social References

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.2%

JSON

Related for CVE-2021-27040

zdi11 cvelist1 prion1 ics1