Lucene search

[email protected]NVD:CVE-2023-25003

HistoryJun 23, 2023 - 7:15 p.m.

CVE-2023-25003

2023-06-2319:15:08

CWE-125

CWE-787

[email protected]

web.nvd.nist.gov

autodesk

autocad

maya

pskernel.dll

out-of-bound read

write

vulnerability

code execution

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%

JSON

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.

Affected configurations

NVD

Node

autodeskaliasRange2023–2023.1.1

autodeskautocadRange2020–2020.1.6

autodeskautocadRange2021–2021.1.3

autodeskautocadRange2022–2022.1.3

autodeskautocadRange2023–2023.1.1

autodeskautocad_advance_steelRange2020–2020.1.6

autodeskautocad_advance_steelRange2021–2021.1.3

autodeskautocad_advance_steelRange2022–2022.1.3

autodeskautocad_advance_steelRange2023–2023.1.1

autodeskautocad_architectureRange2020–2020.1.6

autodeskautocad_architectureRange2021–2021.1.3

autodeskautocad_architectureRange2022–2022.1.3

autodeskautocad_architectureRange2023–2023.1.1

autodeskautocad_civil_3dRange2020–2020.1.6

autodeskautocad_civil_3dRange2021–2021.1.3

autodeskautocad_civil_3dRange2022–2022.1.3

autodeskautocad_civil_3dRange2023–2023.1.1

autodeskautocad_electricalRange2020–2020.1.6

autodeskautocad_electricalRange2021–2021.1.3

autodeskautocad_electricalRange2022–2022.1.3

autodeskautocad_electricalRange2023–2023.1.1

autodeskautocad_ltRange2020–2020.1.6

autodeskautocad_ltRange2021–2021.1.3

autodeskautocad_ltRange2022–2022.1.3

autodeskautocad_ltRange2023–2023.1.1

autodeskautocad_map_3dRange2020–2020.1.6

autodeskautocad_map_3dRange2021–2021.1.3

autodeskautocad_map_3dRange2022–2022.1.3

autodeskautocad_map_3dRange2023–2023.1.1

autodeskautocad_mechanicalRange2020–2020.1.6

autodeskautocad_mechanicalRange2021–2021.1.3

autodeskautocad_mechanicalRange2022–2022.1.3

autodeskautocad_mechanicalRange2023–2023.1.1

autodeskautocad_mepRange2020–2020.1.6

autodeskautocad_mepRange2021–2021.1.3

autodeskautocad_mepRange2022–2022.1.3

autodeskautocad_mepRange2023–2023.1.1

autodeskautocad_plant_3dRange2020–2020.1.6

autodeskautocad_plant_3dRange2021–2021.1.3

autodeskautocad_plant_3dRange2022–2022.1.3

autodeskautocad_plant_3dRange2023–2023.1.1

autodeskinfraworksRange2021–2021.2

autodeskinfraworksRange2022–2022.1

autodeskinfraworksRange2023–2023.1

autodeskinventorRange2021–2021.5

autodeskinventorRange2022–2022.4

autodeskinventorRange2023–2023.3.1

autodeskmaya_usdRange2022–2022.5

autodeskmaya_usdRange2023–2023.3

autodesknavisworksRange2022–2022.4

autodesknavisworksRange2023–2023.2

autodeskrevitRange2021–2021.1.8

autodeskvredRange2023–2023.4

References

www.autodesk.com/trust/security-advisories/adsk-sa-2023-0009

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%

JSON

Related for NVD:CVE-2023-25003

cvelist1 prion1 cve1 nessus1