« Volver al listado

CVE-2023-29075

Estado: ModificadaCrítica (9.8)—

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (10)

Autodesk — AutocadAutodesk — Autocad Advance SteelAutodesk — Autocad ArchitectureAutodesk — Autocad Civil 3DAutodesk — Autocad ElectricalAutodesk — Autocad LTAutodesk — Autocad MAP 3DAutodesk — Autocad MechanicalAutodesk — Autocad MEPAutodesk — Autocad Plant 3D

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-29075",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-29075",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-15T17:36:14.228108Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@autodesk.com",
      "affectedData": [
        {
          "vendor": "Autodesk",
          "product": "AutoCAD, Advance Steel and Civil 3D",
          "versions": [
            {
              "status": "affected",
              "version": "2024, 2023"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2023-11-23T04:15:07.340",
  "references": [
    {
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@autodesk.com"
    },
    {
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@autodesk.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n"
    },
    {
      "lang": "es",
      "value": "Un archivo PRT creado con fines malintencionados, cuando se analiza mediante Autodesk AutoCAD 2024 y 2023, se puede utilizar para provocar una escritura fuera de los límites. Un actor malintencionado puede aprovechar esta vulnerabilidad para provocar un bloqueo, leer datos confidenciales o ejecutar código arbitrario en el contexto del proceso actual."
    }
  ],
  "lastModified": "2026-06-17T05:49:18.803",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A383FEED-E3E3-405E-B68F-BFD7CCA9E6B8",
              "versionEndExcluding": "2024.1"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C53280C1-2A72-455E-965C-06613E469420",
              "versionEndExcluding": "2023.1.4",
              "versionStartIncluding": "2023.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "417B7F6E-18F2-4020-84B4-55191714504F",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C1B51F8-FACC-422B-AB62-571C8534279C",
              "versionEndExcluding": "2023.1.4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D5A59C7-068D-4F8D-95ED-B7A5F2AA55F8",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3524F041-03B7-46A6-AB92-4AA59DD79903",
              "versionEndExcluding": "2023.1.4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4036CA65-3E98-43B5-95D4-7AC1E5345664",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0DE2E5C-0C3B-4E25-B380-ABFBFC34B9D9",
              "versionEndExcluding": "2023.1.4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "982AD391-3D1B-4923-97A5-B2AA41BE2CAC",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80BDD7F9-1D15-4D35-9726-C931BCEE5F05",
              "versionEndExcluding": "2023.1.4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77484E5B-F84E-472E-B151-53FF2667C783",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96B75F1C-FFBB-4B13-8F05-4D7B26F4C58C",
              "versionEndExcluding": "2023.1.4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D5B21F42-E57A-4501-A2BE-6F99122BCBFC",
              "versionEndExcluding": "2024.1"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2225348E-5552-492C-A2DB-C5693516019C",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B450512-9CB3-4CAF-B90C-1EE0194CA665",
              "versionEndExcluding": "2023.1.4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A778F8B-9BB9-4B7A-81B1-DCEDCB493408",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "049B25B6-08E3-4D3D-8E7B-3724B53063F0",
              "versionEndExcluding": "2023.1.4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A8BF172-C18C-40D3-8917-6C33D0144D3E",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC4656EC-02E1-41DF-8FEA-668DE950FA79",
              "versionEndExcluding": "2023.1.4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67E135A2-2C3E-4550-B239-3013C7FA586A",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFDAEB3D-CDF1-4E2F-B1D5-6D4140E8A65C",
              "versionEndExcluding": "2023.1.4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CB26133-E6B9-4D0C-9A58-F564FFB11EF3",
              "versionEndExcluding": "2024.1.1",
              "versionStartIncluding": "2024.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@autodesk.com"
}