KLA10778 arbitrary code execution vulnerability in Autodesk Backburner

An unspecified vulnerability was found in Autodesk Backburner. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed command.

Original advisories

CERT vulnerability

Related products

Backburner

CVE list

CVE-2016-2344 critical

Solution

At this moment vendor does not released patch. Try to update as soon as patch released. While there is no update you can restrict access to manager service. For further instructions and links look at original advisory.

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Autodesk Backburner 2016 versions 2016.0.0.2150 and earlier