7.8

CVE-2019-7364

DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Autodesk ≫ Advance Steel Version 2017
Autodesk ≫ Advance Steel Version 2018
Autodesk ≫ Advance Steel Version 2019
Autodesk ≫ Advance Steel Version 2020
Autodesk ≫ Autocad Version 2017
Autodesk ≫ Autocad Version 2018
Autodesk ≫ Autocad Version 2019
Autodesk ≫ Autocad Version 2020
Autodesk ≫ Autocad Architecture Version 2017
Autodesk ≫ Autocad Architecture Version 2018
Autodesk ≫ Autocad Architecture Version 2019
Autodesk ≫ Autocad Architecture Version 2020
Autodesk ≫ Autocad Electrical Version 2017
Autodesk ≫ Autocad Electrical Version 2018
Autodesk ≫ Autocad Electrical Version 2019
Autodesk ≫ Autocad Electrical Version 2020
Autodesk ≫ Autocad Lt Version 2017
Autodesk ≫ Autocad Lt Version 2018
Autodesk ≫ Autocad Lt Version 2019
Autodesk ≫ Autocad Lt Version 2020
Autodesk ≫ Autocad Map 3d Version 2017
Autodesk ≫ Autocad Map 3d Version 2018
Autodesk ≫ Autocad Map 3d Version 2019
Autodesk ≫ Autocad Map 3d Version 2020
Autodesk ≫ Autocad Mechanical Version 2017
Autodesk ≫ Autocad Mechanical Version 2018
Autodesk ≫ Autocad Mechanical Version 2019
Autodesk ≫ Autocad Mechanical Version 2020
Autodesk ≫ Autocad Mep Version 2017
Autodesk ≫ Autocad Mep Version 2018
Autodesk ≫ Autocad Mep Version 2019
Autodesk ≫ Autocad Mep Version 2020
Autodesk ≫ Autocad P&id Version 2017
Autodesk ≫ Autocad Plant 3d Version 2017
Autodesk ≫ Autocad Plant 3d Version 2018
Autodesk ≫ Autocad Plant 3d Version 2019
Autodesk ≫ Autocad Plant 3d Version 2020
Autodesk ≫ Civil 3d Version 2017
Autodesk ≫ Civil 3d Version 2018
Autodesk ≫ Civil 3d Version 2019
Autodesk ≫ Civil 3d Version 2020
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.89% 0.768
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002
Patch
Vendor Advisory