Lucene search

[email protected]NVD:CVE-2022-32235

HistoryJun 14, 2022 - 7:15 p.m.

CVE-2022-32235

2022-06-1419:15:07

CWE-20

[email protected]

web.nvd.nist.gov

autocad

sap 3d visual enterprise viewer

application crash

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

29.6%

JSON

When a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

Affected configurations

Nvd

Node

sap3d_visual_enterprise_viewerRange≤9.0

VendorProductVersionCPE
sap3d_visual_enterprise_viewer*cpe:2.3:a:sap:3d_visual_enterprise_viewer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	3d_visual_enterprise_viewer	*	cpe:2.3:a:sap:3d_visual_enterprise_viewer::::::::

References

launchpad.support.sap.com/#/notes/3206271

www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

29.6%

JSON

Related for NVD:CVE-2022-32235

zdi1 cvelist1 cve1 prion1