CVE-2024-23147 - Vulnerability Details - OpenCVE

A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Autodesk	Advance Steel Autocad Civil 3d

No data.

No data.

References

Link	Providers
https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009

History

Tue, 28 Jan 2025 16:45:00 +0000

Type	Values Removed	Values Added
Title		Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
Metrics	cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: autodesk

Published: 2024-06-25T02:32:13.779Z

Updated: 2025-01-28T16:36:26.055Z

Reserved: 2024-01-11T21:51:21.127Z

Link: CVE-2024-23147

Vulnrichment

Updated: 2024-08-01T22:59:31.741Z

NVD

Status : Awaiting Analysis

Published: 2024-06-25T03:15:10.190

Modified: 2025-01-28T17:15:21.603

Link: CVE-2024-23147

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-23147", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "state": "PUBLISHED", "assignerShortName": "autodesk", "dateReserved": "2024-01-11T21:51:21.127Z", "datePublished": "2024-06-25T02:32:13.779Z", "dateUpdated": "2025-01-28T16:36:26.055Z"}, "containers": {"cna": {"affected": [{"cpe": ["cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Architecture", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Electrical", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Mechanical", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD MEP", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Plant 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Civil 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Advance Steel", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD MAP 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\"> A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.</span><br>"}], "value": "A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process."}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-119", "description": "CWE-119 Memory Corruption - Generic", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-01-28T16:36:26.055Z"}, "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}], "source": {"discovery": "EXTERNAL"}, "title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "autodesk", "product": "autocad", "cpes": ["cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2024", "status": "affected"}]}, {"vendor": "autodesk", "product": "advance_steel", "cpes": ["cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2024", "status": "affected"}]}, {"vendor": "autodesk", "product": "civil_3d", "cpes": ["cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2024", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-06-25T13:29:29.658321Z", "id": "CVE-2024-23147", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-25T13:29:34.487Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:59:31.741Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:59:31.741Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-23147", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-06-25T13:29:29.658321Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "autocad", "versions": [{"status": "affected", "version": "2024"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "advance_steel", "versions": [{"status": "affected", "version": "2024"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "civil_3d", "versions": [{"status": "affected", "version": "2024"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-25T13:29:23.189Z"}}], "cna": {"title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpe": ["cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Architecture", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Electrical", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Mechanical", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD MEP", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Plant 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Civil 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Advance Steel", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD MAP 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\"> A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.</span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-119", "description": "CWE-119 Memory Corruption - Generic"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-01-28T16:36:26.055Z"}}}, "cveMetadata": {"cveId": "CVE-2024-23147", "state": "PUBLISHED", "dateUpdated": "2025-01-28T16:36:26.055Z", "dateReserved": "2024-01-11T21:51:21.127Z", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "datePublished": "2024-06-25T02:32:13.779Z", "assignerShortName": "autodesk"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process."}, {"lang": "es", "value": "Un CATPART, X_B y STEP creados con fines malintencionados, cuando se analizan en ASMKERN228A.dll y ASMKERN229A.dll a trav\u00e9s de aplicaciones de Autodesk, pueden provocar una vulnerabilidad de corrupci\u00f3n de memoria por infracci\u00f3n de acceso de escritura. Esta vulnerabilidad, junto con otras vulnerabilidades, puede provocar la ejecuci\u00f3n de c\u00f3digo en el contexto del proceso actual."}], "id": "CVE-2024-23147", "lastModified": "2025-01-28T17:15:21.603", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@autodesk.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-06-25T03:15:10.190", "references": [{"source": "psirt@autodesk.com", "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "psirt@autodesk.com", "type": "Secondary"}]}