Lucene search

[email protected]CVE-2022-42942

HistoryOct 21, 2022 - 4:15 p.m.

CVE-2022-42942

2022-10-2116:15:11

CWE-787

[email protected]

web.nvd.nist.gov

cve-2022-42942

dwf

.pct

memory corruption

vulnerability

code execution

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

28.7%

JSON

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected configurations

NVD

Node

autodeskautocadMatch2019

autodeskautocadMatch2020

autodeskautocadMatch2021

autodeskautocadMatch2022

autodeskautocadMatch2022macos

autodeskautocadMatch2023

autodeskautocad_advance_steelMatch2019

autodeskautocad_advance_steelMatch2020

autodeskautocad_advance_steelMatch2021

autodeskautocad_advance_steelMatch2022

autodeskautocad_advance_steelMatch2023

autodeskautocad_architectureMatch2019

autodeskautocad_architectureMatch2020

autodeskautocad_architectureMatch2021

autodeskautocad_architectureMatch2022

autodeskautocad_architectureMatch2023

autodeskautocad_civil_3dMatch2019

autodeskautocad_civil_3dMatch2020

autodeskautocad_civil_3dMatch2021

autodeskautocad_civil_3dMatch2022

autodeskautocad_civil_3dMatch2023

autodeskautocad_electricalMatch2019

autodeskautocad_electricalMatch2020

autodeskautocad_electricalMatch2021

autodeskautocad_electricalMatch2022

autodeskautocad_electricalMatch2023

autodeskautocad_ltMatch2019

autodeskautocad_ltMatch2020

autodeskautocad_ltMatch2021

autodeskautocad_ltMatch2022

autodeskautocad_ltMatch2022macos

autodeskautocad_ltMatch2023

autodeskautocad_map_3dMatch2019

autodeskautocad_map_3dMatch2020

autodeskautocad_map_3dMatch2021

autodeskautocad_map_3dMatch2022

autodeskautocad_map_3dMatch2023

autodeskautocad_mechanicalMatch2019

autodeskautocad_mechanicalMatch2020

autodeskautocad_mechanicalMatch2021

autodeskautocad_mechanicalMatch2022

autodeskautocad_mechanicalMatch2023

autodeskautocad_mepMatch2019

autodeskautocad_mepMatch2020

autodeskautocad_mepMatch2021

autodeskautocad_mepMatch2022

autodeskautocad_mepMatch2023

autodeskautocad_plant_3dMatch2019

autodeskautocad_plant_3dMatch2020

autodeskautocad_plant_3dMatch2021

autodeskautocad_plant_3dMatch2022

autodeskautocad_plant_3dMatch2023

autodeskdesign_reviewMatch2018-

CPENameOperatorVersion
autodesk:autocadautodesk autocadeq2019
autodesk:autocadautodesk autocadeq2020
autodesk:autocadautodesk autocadeq2021
autodesk:autocadautodesk autocadeq2022
autodesk:autocadautodesk autocadeq2023
autodesk:autocad_advance_steelautodesk autocad advance steeleq2019
autodesk:autocad_advance_steelautodesk autocad advance steeleq2020
autodesk:autocad_advance_steelautodesk autocad advance steeleq2021
autodesk:autocad_advance_steelautodesk autocad advance steeleq2022
autodesk:autocad_advance_steelautodesk autocad advance steeleq2023

CPE	Name	Operator	Version
autodesk:autocad	autodesk autocad	eq	2019
autodesk:autocad	autodesk autocad	eq	2020
autodesk:autocad	autodesk autocad	eq	2021
autodesk:autocad	autodesk autocad	eq	2022
autodesk:autocad	autodesk autocad	eq	2023
autodesk:autocad_advance_steel	autodesk autocad advance steel	eq	2019
autodesk:autocad_advance_steel	autodesk autocad advance steel	eq	2020
autodesk:autocad_advance_steel	autodesk autocad advance steel	eq	2021
autodesk:autocad_advance_steel	autodesk autocad advance steel	eq	2022
autodesk:autocad_advance_steel	autodesk autocad advance steel	eq	2023

Rows per page:

1-10 of 511

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Autodesk Design Review",
    "versions": [
      {
        "version": "2018, 2017, 2013, 2012, 2011",
        "status": "affected"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

28.7%

JSON

Related for CVE-2022-42942

prion1 cvelist1 nvd1