Lucene search

K
nvd[email protected]NVD:CVE-2023-29076
HistoryNov 23, 2023 - 4:15 a.m.

CVE-2023-29076

2023-11-2304:15:07
CWE-119
web.nvd.nist.gov
4
malicious file
code execution
memory corruption
autodesk autocad 2024
autodesk autocad 2023

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.3%

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Affected configurations

Nvd
Node
autodeskautocadRange<2024.1macos
OR
autodeskautocadRange2023.0.02023.1.4
OR
autodeskautocadRange2024.0.02024.1.1
OR
autodeskautocad_advance_steelRange<2023.1.4
OR
autodeskautocad_advance_steelRange2024.0.02024.1.1
OR
autodeskautocad_architectureRange<2023.1.4
OR
autodeskautocad_architectureRange2024.0.02024.1.1
OR
autodeskautocad_civil_3dRange<2023.1.4
OR
autodeskautocad_civil_3dRange2024.0.02024.1.1
OR
autodeskautocad_electricalRange<2023.1.4
OR
autodeskautocad_electricalRange2024.0.02024.1.1
OR
autodeskautocad_ltRange<2023.1.4
OR
autodeskautocad_ltRange<2024.1macos
OR
autodeskautocad_ltRange2024.0.02024.1.1
OR
autodeskautocad_map_3dRange<2023.1.4
OR
autodeskautocad_map_3dRange2024.0.02024.1.1
OR
autodeskautocad_mechanicalRange<2023.1.4
OR
autodeskautocad_mechanicalRange2024.0.02024.1.1
OR
autodeskautocad_mepRange<2023.1.4
OR
autodeskautocad_mepRange2024.0.02024.1.1
OR
autodeskautocad_plant_3dRange<2023.1.4
OR
autodeskautocad_plant_3dRange2024.0.02024.1.1
VendorProductVersionCPE
autodeskautocad*cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:*
autodeskautocad*cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
autodeskautocad_advance_steel*cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
autodeskautocad_architecture*cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
autodeskautocad_civil_3d*cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
autodeskautocad_electrical*cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
autodeskautocad_lt*cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
autodeskautocad_lt*cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:*
autodeskautocad_map_3d*cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
autodeskautocad_mechanical*cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.3%

Related for NVD:CVE-2023-29076