7.8

CVE-2022-33883

EPSS 0.06%
Veröffentlicht 03.10.2022 15:15:16
Zuletzt bearbeitet 21.11.2024 07:08:31
Quelle psirt@autodesk.com
CVE-Watchlists
Login
Unerledigt
Login

A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Autodesk ≫ Advanced Material Exchange Version2019

Autodesk ≫ Advanced Material Exchange Version2021

Autodesk ≫ Moldflow Adviser Version2019

Autodesk ≫ Moldflow Adviser Version2021

Autodesk ≫ Moldflow Communicator Version2019

Autodesk ≫ Moldflow Communicator Version2021

Autodesk ≫ Moldflow Synergy Version2019

Autodesk ≫ Moldflow Synergy Version2021

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.184

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0019

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-33883

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-33883

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-33883

EUVD