Lucene search

[email protected]NVD:CVE-2022-33884

HistoryOct 03, 2022 - 3:15 p.m.

CVE-2022-33884

2022-10-0315:15:16

CWE-125

[email protected]

web.nvd.nist.gov

autodesk

autocad

parsing

x_b file

vulnerability

code execution

process

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.004

Percentile

72.9%

JSON

Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected configurations

Nvd

Node

autodeskautocadRange2020–2020.1.6

autodeskautocadRange2021–2021.1.3

autodeskautocadRange2022–2022.1.3

autodeskautocadRange2023–2023.1.1

autodeskautocad_advance_steelRange2020–2020.1.6

autodeskautocad_advance_steelRange2021–2021.1.3

autodeskautocad_advance_steelRange2022–2022.1.3

autodeskautocad_advance_steelRange2023–2023.1.1

autodeskautocad_architectureRange2020–2020.1.6

autodeskautocad_architectureRange2021–2021.1.3

autodeskautocad_architectureRange2022–2022.1.3

autodeskautocad_architectureRange2023–2023.1.1

autodeskautocad_civil_3dRange2020–2020.1.6

autodeskautocad_civil_3dRange2021–2021.1.3

autodeskautocad_civil_3dRange2022–2022.1.3

autodeskautocad_civil_3dRange2023–2023.1.1

autodeskautocad_electricalRange2020–2020.1.6

autodeskautocad_electricalRange2021–2021.1.3

autodeskautocad_electricalRange2022–2022.1.3

autodeskautocad_electricalRange2023–2023.1.1

autodeskautocad_ltRange2020–2020.1.6

autodeskautocad_ltRange2021–2021.1.3

autodeskautocad_ltRange2022–2022.1.3

autodeskautocad_ltRange2023–2023.1.1

autodeskautocad_map_3dRange2020–2020.1.6

autodeskautocad_map_3dRange2021–2021.1.3

autodeskautocad_map_3dRange2022–2022.1.3

autodeskautocad_map_3dRange2023–2023.1.1

autodeskautocad_mechanicalRange2020–2020.1.6

autodeskautocad_mechanicalRange2021–2021.1.3

autodeskautocad_mechanicalRange2022–2022.1.3

autodeskautocad_mechanicalRange2023–2023.1.1

autodeskautocad_mepRange2020–2020.1.6

autodeskautocad_mepRange2021–2021.1.3

autodeskautocad_mepRange2022–2022.1.3

autodeskautocad_mepRange2023–2023.1.1

autodeskautocad_plant_3dRange2020–2020.1.6

autodeskautocad_plant_3dRange2021–2021.1.3

autodeskautocad_plant_3dRange2022–2022.1.3

autodeskautocad_plant_3dRange2023–2023.1.1

VendorProductVersionCPE
autodeskautocad*cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
autodeskautocad_advance_steel*cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
autodeskautocad_architecture*cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
autodeskautocad_civil_3d*cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
autodeskautocad_electrical*cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
autodeskautocad_lt*cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
autodeskautocad_map_3d*cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
autodeskautocad_mechanical*cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
autodeskautocad_mep*cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
autodeskautocad_plant_3d*cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
autodesk	autocad	*	cpe:2.3:a:autodesk:autocad::::::::
autodesk	autocad_advance_steel	*	cpe:2.3:a:autodesk:autocad_advance_steel::::::::
autodesk	autocad_architecture	*	cpe:2.3:a:autodesk:autocad_architecture::::::::
autodesk	autocad_civil_3d	*	cpe:2.3:a:autodesk:autocad_civil_3d::::::::
autodesk	autocad_electrical	*	cpe:2.3:a:autodesk:autocad_electrical::::::::
autodesk	autocad_lt	*	cpe:2.3:a:autodesk:autocad_lt::::::::
autodesk	autocad_map_3d	*	cpe:2.3:a:autodesk:autocad_map_3d::::::::
autodesk	autocad_mechanical	*	cpe:2.3:a:autodesk:autocad_mechanical::::::::
autodesk	autocad_mep	*	cpe:2.3:a:autodesk:autocad_mep::::::::
autodesk	autocad_plant_3d	*	cpe:2.3:a:autodesk:autocad_plant_3d::::::::