Lucene search

[email protected]CVE-2023-25002

HistoryJun 27, 2023 - 11:15 p.m.

CVE-2023-25002

2023-06-2723:15:09

CWE-416

[email protected]

web.nvd.nist.gov

cve-2023-25002

skp file

autodesk products

use-after-free vulnerability

code execution

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%

JSON

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

Affected configurations

NVD

Node

autodesk3ds_maxMatch2022

autodesk3ds_maxMatch2023

autodesknavisworksMatch2022

autodesknavisworksMatch2023

autodeskrevitMatch2022

autodeskrevitMatch2023

autodeskvredMatch2023

CPENameOperatorVersion
autodesk:3ds_maxautodesk 3ds maxeq2022
autodesk:3ds_maxautodesk 3ds maxeq2023
autodesk:navisworksautodesk navisworkseq2022
autodesk:navisworksautodesk navisworkseq2023
autodesk:revitautodesk reviteq2022
autodesk:revitautodesk reviteq2023
autodesk:vredautodesk vredeq2023

CPE	Name	Operator	Version
autodesk:3ds_max	autodesk 3ds max	eq	2022
autodesk:3ds_max	autodesk 3ds max	eq	2023
autodesk:navisworks	autodesk navisworks	eq	2022
autodesk:navisworks	autodesk navisworks	eq	2023
autodesk:revit	autodesk revit	eq	2022
autodesk:revit	autodesk revit	eq	2023
autodesk:vred	autodesk vred	eq	2023

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Multiple",
    "versions": [
      {
        "version": "2023, 2022, 2021",
        "status": "affected"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2023-0002

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%

JSON

Related for CVE-2023-25002

nvd1 cvelist1 prion1