← Back

CVE-2023-25004

nvd nist
Published: Jun 27, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.

Affected (53)

Autodesk
17 products
Alias
Autocad
Autocad Advance Steel
Autocad Architecture
Autocad Civil 3d
Autocad Electrical
Autocad Lt
Autocad Map 3d
Autocad Mechanical
Autocad Mep
Autocad Plant 3d
Infraworks
Inventor
Maya Usd
Navisworks
Revit
Vred
Configuration A
53 vulnerable
Vulnerable SoftwareAffected Versions
Alias
2023 ≤ version < 2023.1.1
Autodesk
Autocad
2020 ≤ version < 2020.1.6
Autocad
2021 ≤ version < 2021.1.3
Autocad
2022 ≤ version < 2022.1.3
Autocad
2023 ≤ version < 2023.1.1
Autodesk
Autocad Advance Steel
2020 ≤ version < 2020.1.6
Autocad Advance Steel
2021 ≤ version < 2021.1.3
Autocad Advance Steel
2022 ≤ version < 2022.1.3
Autocad Advance Steel
2023 ≤ version < 2023.1.1
Autodesk
Autocad Architecture
2020 ≤ version < 2020.1.6
Autocad Architecture
2021 ≤ version < 2021.1.3
Autocad Architecture
2022 ≤ version < 2022.1.3
Autocad Architecture
2023 ≤ version < 2023.1.1
Autodesk
Autocad Civil 3d
2020 ≤ version < 2020.1.6
Autocad Civil 3d
2021 ≤ version < 2021.1.3
Autocad Civil 3d
2022 ≤ version < 2022.1.3
Autocad Civil 3d
2023 ≤ version < 2023.1.1
Autodesk
Autocad Electrical
2020 ≤ version < 2020.1.6
Autocad Electrical
2021 ≤ version < 2021.1.3
Autocad Electrical
2022 ≤ version < 2022.1.3
Autocad Electrical
2023 ≤ version < 2023.1.1
Autodesk
Autocad Lt
2020 ≤ version < 2020.1.6
Autocad Lt
2021 ≤ version < 2021.1.3
Autocad Lt
2022 ≤ version < 2022.1.3
Autocad Lt
2023 ≤ version < 2023.1.1
Autodesk
Autocad Map 3d
2020 ≤ version < 2020.1.6
Autocad Map 3d
2021 ≤ version < 2021.1.3
Autocad Map 3d
2022 ≤ version < 2022.1.3
Autocad Map 3d
2023 ≤ version < 2023.1.1
Autodesk
Autocad Mechanical
2020 ≤ version < 2020.1.6
Autocad Mechanical
2021 ≤ version < 2021.1.3
Autocad Mechanical
2022 ≤ version < 2022.1.3
Autocad Mechanical
2023 ≤ version < 2023.1.1
Autodesk
Autocad Mep
2020 ≤ version < 2020.1.6
Autocad Mep
2021 ≤ version < 2021.1.3
Autocad Mep
2022 ≤ version < 2022.1.3
Autocad Mep
2023 ≤ version < 2023.1.1
Autodesk
Autocad Plant 3d
2020 ≤ version < 2020.1.6
Autocad Plant 3d
2021 ≤ version < 2021.1.3
Autocad Plant 3d
2022 ≤ version < 2022.1.3
Autocad Plant 3d
2023 ≤ version < 2023.1.1
Autodesk
Infraworks
2021 ≤ version < 2021.2
Infraworks
2022 ≤ version < 2022.1
Infraworks
2023 ≤ version < 2023.1
Autodesk
Inventor
2021 ≤ version < 2021.5
Inventor
2022 ≤ version < 2022.4
Inventor
2023 ≤ version < 2023.3.1
Autodesk
Maya Usd
2022 ≤ version < 2022.5
Maya Usd
2023 ≤ version < 2023.3
Autodesk
Navisworks
2022 ≤ version < 2022.4
Navisworks
2023 ≤ version < 2023.2
Revit
2021 ≤ version < 2021.1.8
Vred
2023 ≤ version < 2023.4

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.