CVE-2023-29076

EUVD-2023-32679 · Published Nov 23, 2023

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Technologies

Autodesk Autocad MechanicalAutodesk Autocad Advance SteelAutodesk AutocadAutodesk Autocad MepAutodesk Autocad Map 3DAutodesk Autocad Plant 3DAutodesk Autocad Civil 3DAutodesk Autocad LtAutodesk Autocad ElectricalAutodesk Autocad Architecture

Weaknesses

CWE-119

CVSS scores

v3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018

Potentially impacted assets

See if this affects your attack surface