← Back

CVE-2023-25004

nvd nist
Published: Jun 27, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.

Affected (53)

Autodesk
17 products
Alias
Autocad
Autocad Advance Steel
Autocad Architecture
Autocad Civil 3d
Autocad Electrical
Autocad Lt
Autocad Map 3d
Autocad Mechanical
Autocad Mep
Autocad Plant 3d
Infraworks
Inventor
Maya Usd
Navisworks
Revit
Vred
Configuration A
53 vulnerable
Vulnerable SoftwareAffected Versions
Alias
From 2023 to 2023.1.1
Autodesk
Autocad
From 2020 to 2020.1.6
Autocad
From 2021 to 2021.1.3
Autocad
From 2022 to 2022.1.3
Autocad
From 2023 to 2023.1.1
Autodesk
Autocad Advance Steel
From 2020 to 2020.1.6
Autocad Advance Steel
From 2021 to 2021.1.3
Autocad Advance Steel
From 2022 to 2022.1.3
Autocad Advance Steel
From 2023 to 2023.1.1
Autodesk
Autocad Architecture
From 2020 to 2020.1.6
Autocad Architecture
From 2021 to 2021.1.3
Autocad Architecture
From 2022 to 2022.1.3
Autocad Architecture
From 2023 to 2023.1.1
Autodesk
Autocad Civil 3d
From 2020 to 2020.1.6
Autocad Civil 3d
From 2021 to 2021.1.3
Autocad Civil 3d
From 2022 to 2022.1.3
Autocad Civil 3d
From 2023 to 2023.1.1
Autodesk
Autocad Electrical
From 2020 to 2020.1.6
Autocad Electrical
From 2021 to 2021.1.3
Autocad Electrical
From 2022 to 2022.1.3
Autocad Electrical
From 2023 to 2023.1.1
Autodesk
Autocad Lt
From 2020 to 2020.1.6
Autocad Lt
From 2021 to 2021.1.3
Autocad Lt
From 2022 to 2022.1.3
Autocad Lt
From 2023 to 2023.1.1
Autodesk
Autocad Map 3d
From 2020 to 2020.1.6
Autocad Map 3d
From 2021 to 2021.1.3
Autocad Map 3d
From 2022 to 2022.1.3
Autocad Map 3d
From 2023 to 2023.1.1
Autodesk
Autocad Mechanical
From 2020 to 2020.1.6
Autocad Mechanical
From 2021 to 2021.1.3
Autocad Mechanical
From 2022 to 2022.1.3
Autocad Mechanical
From 2023 to 2023.1.1
Autodesk
Autocad Mep
From 2020 to 2020.1.6
Autocad Mep
From 2021 to 2021.1.3
Autocad Mep
From 2022 to 2022.1.3
Autocad Mep
From 2023 to 2023.1.1
Autodesk
Autocad Plant 3d
From 2020 to 2020.1.6
Autocad Plant 3d
From 2021 to 2021.1.3
Autocad Plant 3d
From 2022 to 2022.1.3
Autocad Plant 3d
From 2023 to 2023.1.1
Autodesk
Infraworks
From 2021 to 2021.2
Infraworks
From 2022 to 2022.1
Infraworks
From 2023 to 2023.1
Autodesk
Inventor
From 2021 to 2021.5
Inventor
From 2022 to 2022.4
Inventor
From 2023 to 2023.3.1
Autodesk
Maya Usd
From 2022 to 2022.5
Maya Usd
From 2023 to 2023.3
Autodesk
Navisworks
From 2022 to 2022.4
Navisworks
From 2023 to 2023.2
Revit
From 2021 to 2021.1.8
Vred
From 2023 to 2023.4

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.