CVE-2023-27912
Published Apr 14, 2023
Last updated 2 years ago
Overview
- Description
- A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.
- Source
- psirt@autodesk.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
Weaknesses
- nvd@nist.gov
- CWE-125
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2568A62-E5C4-490E-81F8-544415B928DC",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
},
{
"criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D94FD09-1B96-4778-BFAD-078C8B8501B5",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
},
{
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "299634F4-D72C-4DD2-9F51-7B2AD8A92798",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
},
{
"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D28E2A64-93A8-4421-94E8-05E080C8A342",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
},
{
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C845EE8F-8DDA-4242-B5E1-91CEDEA163BD",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
},
{
"criteria": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A80FA213-D03D-426D-B271-25BF1BDA648E",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
},
{
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18DD5427-3666-4D5E-9AB9-A0236F79181E",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
},
{
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C22D3F40-E682-4871-B18F-E84829FBFB22",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
},
{
"criteria": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "326B5CC6-1BFB-497B-863C-88874878449B",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
},
{
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CAD08203-9B65-4141-A35E-3B9EACFE4B54",
"versionEndExcluding": "2023.1.3",
"versionStartIncluding": "2023"
}
],
"operator": "OR"
}
]
}
]