Lucene search

[email protected]CVE-2023-27912

HistoryApr 14, 2023 - 7:15 p.m.

CVE-2023-27912

2023-04-1419:15:08

CWE-125

[email protected]

web.nvd.nist.gov

cve-2023-27912

x_b file

autodesk

autocad

out-of-bound read

vulnerability

security

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

23.1%

JSON

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.

Affected configurations

NVD

Node

autodeskautocadRange2023–2023.1.3

autodeskautocad_advance_steelRange2023–2023.1.3

autodeskautocad_architectureRange2023–2023.1.3

autodeskautocad_civil_3dRange2023–2023.1.3

autodeskautocad_electricalRange2023–2023.1.3

autodeskautocad_ltRange2023–2023.1.3

autodeskautocad_map_3dRange2023–2023.1.3

autodeskautocad_mechanicalRange2023–2023.1.3

autodeskautocad_mepRange2023–2023.1.3

autodeskautocad_plant_3dRange2023–2023.1.3

CPENameOperatorVersion
autodesk:autocadautodesk autocadlt2023.1.3
autodesk:autocad_advance_steelautodesk autocad advance steellt2023.1.3
autodesk:autocad_architectureautodesk autocad architecturelt2023.1.3
autodesk:autocad_civil_3dautodesk autocad civil 3dlt2023.1.3
autodesk:autocad_electricalautodesk autocad electricallt2023.1.3
autodesk:autocad_ltautodesk autocad ltlt2023.1.3
autodesk:autocad_map_3dautodesk autocad map 3dlt2023.1.3
autodesk:autocad_mechanicalautodesk autocad mechanicallt2023.1.3
autodesk:autocad_mepautodesk autocad meplt2023.1.3
autodesk:autocad_plant_3dautodesk autocad plant 3dlt2023.1.3

CPE	Name	Operator	Version
autodesk:autocad	autodesk autocad	lt	2023.1.3
autodesk:autocad_advance_steel	autodesk autocad advance steel	lt	2023.1.3
autodesk:autocad_architecture	autodesk autocad architecture	lt	2023.1.3
autodesk:autocad_civil_3d	autodesk autocad civil 3d	lt	2023.1.3
autodesk:autocad_electrical	autodesk autocad electrical	lt	2023.1.3
autodesk:autocad_lt	autodesk autocad lt	lt	2023.1.3
autodesk:autocad_map_3d	autodesk autocad map 3d	lt	2023.1.3
autodesk:autocad_mechanical	autodesk autocad mechanical	lt	2023.1.3
autodesk:autocad_mep	autodesk autocad mep	lt	2023.1.3
autodesk:autocad_plant_3d	autodesk autocad plant 3d	lt	2023.1.3

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Autodesk AutoCAD",
    "versions": [
      {
        "version": "2023",
        "status": "affected"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

23.1%

JSON

Related for CVE-2023-27912

prion1 cvelist1 nvd1