CVE-2025-5047

Estado: AnalizadaAlta (7.8)—

A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Puntuación base: 7.8

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.18%
Percentil entre todas las CVEs puntuadas: 7
Fecha de la puntuación: 5/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1203 Exploitation for Client Executionexecution95 %
Impacto principalT1059 Command and Scripting Interpreterexecution85 %
Impacto secundarioT1005 Data from Local Systemcollection80 %
Impacto secundarioT1499.004 Application or System Exploitationimpact75 %

Vector CVSS AV:L/UI:R indica ejecución en cliente (usuario abre archivo DGN malformado). Impactos: ejecución arbitraria de código, lectura de datos sensibles y DoS por crash (CWE-457: variable no inicializada).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Restrict Web-Based Content Privileged Account Management Limit Software Installation Filter Network Traffic Execution Prevention Behavior Prevention on Endpoint

Tecnologías afectadas (10)

Autodesk — Advance Steel Autodesk — Autocad Autodesk — Autocad Architecture Autodesk — Autocad Electrical Autodesk — Autocad LT Autodesk — Autocad MAP 3D Autodesk — Autocad Mechanical Autodesk — Autocad MEP Autodesk — Autocad Plant 3D Autodesk — Civil 3D

CWE

CWE-457

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2025-5047",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-5047",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-16T03:55:53.608962Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@autodesk.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@autodesk.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "AutoCAD",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_lt:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "AutoCAD LT",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "AutoCAD Architecture",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "AutoCAD Electrical",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "AutoCAD MAP 3D",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "AutoCAD Mechanical",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "AutoCAD MEP",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "AutoCAD Plant 3D",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "Civil 3D",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*"
          ],
          "vendor": "Autodesk",
          "product": "Advance Steel",
          "versions": [
            {
              "status": "affected",
              "version": "2026",
              "lessThan": "2026.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2025",
              "lessThan": "2025.1.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024",
              "lessThan": "2024.1.8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "2023.1.8",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-08-15T15:15:33.153",
  "references": [
    {
      "url": "https://www.autodesk.com/products/autodesk-access/overview",
      "tags": [
        "Product"
      ],
      "source": "psirt@autodesk.com"
    },
    {
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0017",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@autodesk.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@autodesk.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-457"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."
    },
    {
      "lang": "es",
      "value": "Un archivo DGN manipulado con fines maliciosos, al analizarse mediante Autodesk AutoCAD, puede forzar una vulnerabilidad de variable no inicializada. Un agente malintencionado puede aprovechar esta vulnerabilidad para provocar un bloqueo, leer datos confidenciales o ejecutar código arbitrario en el contexto del proceso actual."
    }
  ],
  "lastModified": "2026-06-17T09:47:05.323",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:autodesk:advance_steel:2026:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "68738B5A-B918-4CA3-BD13-4040B3219AFC"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8890EECB-7AB5-41A3-8E77-314183BC3AB3"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_architecture:2026:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE935915-6926-474F-B5A4-7E77EF7426DD"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_electrical:2026:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEC23105-1362-4BFE-9C93-F0AAA5BAF2B0"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:-:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51F919FB-6AFC-43FF-91C4-DC15FCF5B6EF"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2026:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DB79016-0BB6-4E8A-8AE3-5AB39A252DED"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2026:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A159D88-990D-41D7-B6B0-D97B38241860"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mep:2026:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "046ADE16-4275-4BEF-9A71-480E709383F7"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2026:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEB9FCDC-6717-44EB-AA55-983A771E2460"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:civil_3d:2026:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3383C40E-DD43-4146-9B58-C44585E40985"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@autodesk.com"
}