Lucene search

[email protected]CVE-2022-33883

HistoryOct 03, 2022 - 3:15 p.m.

CVE-2022-33883

2022-10-0315:15:00

CWE-787

[email protected]

web.nvd.nist.gov

cve-2022-33883

moldflow

synergy

adviser

communicator

memory corruption

code execution

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

28.3%

JSON

A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CPENameOperatorVersion
autodesk:moldflow_synergyautodesk moldflow synergyeq2019
autodesk:moldflow_synergyautodesk moldflow synergyeq2021
autodesk:moldflow_communicatorautodesk moldflow communicatoreq2019
autodesk:moldflow_communicatorautodesk moldflow communicatoreq2021
autodesk:moldflow_adviserautodesk moldflow advisereq2019
autodesk:moldflow_adviserautodesk moldflow advisereq2021
autodesk:advanced_material_exchangeautodesk advanced material exchangeeq2019
autodesk:advanced_material_exchangeautodesk advanced material exchangeeq2021

CPE	Name	Operator	Version
autodesk:moldflow_synergy	autodesk moldflow synergy	eq	2019
autodesk:moldflow_synergy	autodesk moldflow synergy	eq	2021
autodesk:moldflow_communicator	autodesk moldflow communicator	eq	2019
autodesk:moldflow_communicator	autodesk moldflow communicator	eq	2021
autodesk:moldflow_adviser	autodesk moldflow adviser	eq	2019
autodesk:moldflow_adviser	autodesk moldflow adviser	eq	2021
autodesk:advanced_material_exchange	autodesk advanced material exchange	eq	2019
autodesk:advanced_material_exchange	autodesk advanced material exchange	eq	2021

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0019

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

28.3%

JSON

Related for CVE-2022-33883

prion1 cvelist1