CVE-2021-40159

Published: Jan 25, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process.

Affected (14)

Products: Autodesk: Advance Steel, Autocad, Autocad Architecture, Autocad Electrical, Autocad Lt, Autocad Map 3d, Autocad Mechanical, Autocad Mep, Autocad Plant 3d, Civil 3d, Inventor

11 products

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Autodesk Advance Steel	From 2022 to 2022.1.2
Autodesk Autocad	From 2022 to 2022.1.2
Autodesk Autocad Architecture	From 2022 to 2022.1.2
Autodesk Autocad Electrical	From 2022 to 2022.1.2
Autodesk Autocad Lt	From 2022 to 2022.1.2
Autodesk Autocad Map 3d	From 2022 to 2022.1.2
Autodesk Autocad Mechanical	From 2022 to 2022.1.2
Autodesk Autocad Mep	From 2022 to 2022.1.2
Autodesk Autocad Plant 3d	From 2022 to 2022.1.2
Autodesk Civil 3d	From 2022 to 2022.1.2
Autodesk Inventor	Version 2019
Autodesk Inventor	Version 2020
Autodesk Inventor	Version 2021
Autodesk Inventor	Version 2022