Lucene search

[email protected]CVE-2023-25003

HistoryJun 23, 2023 - 7:15 p.m.

CVE-2023-25003

2023-06-2319:15:08

CWE-787

CWE-125

[email protected]

web.nvd.nist.gov

cve-2023-25003

autodesk

autocad 2023

maya 2022

nvd

code execution

out-of-bound vulnerabilities

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%

JSON

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.

Affected configurations

NVD

Node

autodeskaliasRange2023–2023.1.1

autodeskautocadRange2020–2020.1.6

autodeskautocadRange2021–2021.1.3

autodeskautocadRange2022–2022.1.3

autodeskautocadRange2023–2023.1.1

autodeskautocad_advance_steelRange2020–2020.1.6

autodeskautocad_advance_steelRange2021–2021.1.3

autodeskautocad_advance_steelRange2022–2022.1.3

autodeskautocad_advance_steelRange2023–2023.1.1

autodeskautocad_architectureRange2020–2020.1.6

autodeskautocad_architectureRange2021–2021.1.3

autodeskautocad_architectureRange2022–2022.1.3

autodeskautocad_architectureRange2023–2023.1.1

autodeskautocad_civil_3dRange2020–2020.1.6

autodeskautocad_civil_3dRange2021–2021.1.3

autodeskautocad_civil_3dRange2022–2022.1.3

autodeskautocad_civil_3dRange2023–2023.1.1

autodeskautocad_electricalRange2020–2020.1.6

autodeskautocad_electricalRange2021–2021.1.3

autodeskautocad_electricalRange2022–2022.1.3

autodeskautocad_electricalRange2023–2023.1.1

autodeskautocad_ltRange2020–2020.1.6

autodeskautocad_ltRange2021–2021.1.3

autodeskautocad_ltRange2022–2022.1.3

autodeskautocad_ltRange2023–2023.1.1

autodeskautocad_map_3dRange2020–2020.1.6

autodeskautocad_map_3dRange2021–2021.1.3

autodeskautocad_map_3dRange2022–2022.1.3

autodeskautocad_map_3dRange2023–2023.1.1

autodeskautocad_mechanicalRange2020–2020.1.6

autodeskautocad_mechanicalRange2021–2021.1.3

autodeskautocad_mechanicalRange2022–2022.1.3

autodeskautocad_mechanicalRange2023–2023.1.1

autodeskautocad_mepRange2020–2020.1.6

autodeskautocad_mepRange2021–2021.1.3

autodeskautocad_mepRange2022–2022.1.3

autodeskautocad_mepRange2023–2023.1.1

autodeskautocad_plant_3dRange2020–2020.1.6

autodeskautocad_plant_3dRange2021–2021.1.3

autodeskautocad_plant_3dRange2022–2022.1.3

autodeskautocad_plant_3dRange2023–2023.1.1

autodeskinfraworksRange2021–2021.2

autodeskinfraworksRange2022–2022.1

autodeskinfraworksRange2023–2023.1

autodeskinventorRange2021–2021.5

autodeskinventorRange2022–2022.4

autodeskinventorRange2023–2023.3.1

autodeskmaya_usdRange2022–2022.5

autodeskmaya_usdRange2023–2023.3

autodesknavisworksRange2022–2022.4

autodesknavisworksRange2023–2023.2

autodeskrevitRange2021–2021.1.8

autodeskvredRange2023–2023.4

CPENameOperatorVersion
autodesk:aliasautodesk aliaslt2023.1.1
autodesk:autocadautodesk autocadlt2020.1.6
autodesk:autocadautodesk autocadlt2021.1.3
autodesk:autocadautodesk autocadlt2022.1.3
autodesk:autocadautodesk autocadlt2023.1.1
autodesk:autocad_advance_steelautodesk autocad advance steellt2020.1.6
autodesk:autocad_advance_steelautodesk autocad advance steellt2021.1.3
autodesk:autocad_advance_steelautodesk autocad advance steellt2022.1.3
autodesk:autocad_advance_steelautodesk autocad advance steellt2023.1.1
autodesk:autocad_architectureautodesk autocad architecturelt2020.1.6

CPE	Name	Operator	Version
autodesk:alias	autodesk alias	lt	2023.1.1
autodesk:autocad	autodesk autocad	lt	2020.1.6
autodesk:autocad	autodesk autocad	lt	2021.1.3
autodesk:autocad	autodesk autocad	lt	2022.1.3
autodesk:autocad	autodesk autocad	lt	2023.1.1
autodesk:autocad_advance_steel	autodesk autocad advance steel	lt	2020.1.6
autodesk:autocad_advance_steel	autodesk autocad advance steel	lt	2021.1.3
autodesk:autocad_advance_steel	autodesk autocad advance steel	lt	2022.1.3
autodesk:autocad_advance_steel	autodesk autocad advance steel	lt	2023.1.1
autodesk:autocad_architecture	autodesk autocad architecture	lt	2020.1.6

Rows per page:

1-10 of 531

CNA Affected

[
  {
    "vendor": "n/a",
    "product": " AutoCAD, Maya ",
    "versions": [
      {
        "version": "2023, 2022",
        "status": "affected"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2023-0009

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%

JSON

Related for CVE-2023-25003

cvelist1 prion1 nvd1 nessus1