CVE-2024-37002highCWE-457

CVE-2024-37002: high-severity vulnerability in Autodesk AutoCAD

Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

Published · Updated

Follow this CVE+ Monitor AutoCAD+ Monitor Civil

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.4%
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Autodesk · Advance SteelAutodesk · AutoCADAutodesk · AutoCAD ArchitectureAutodesk · AutoCAD ElectricalAutodesk · AutoCAD MAP 3DAutodesk · AutoCAD MechanicalAutodesk · AutoCAD MEPAutodesk · AutoCAD Plant 3DAutodesk · Civil 3D
Related CVEs — Autodesk AutoCAD

In the same product, most dangerous first.

CVE-2024-23137HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 1.0%CVE-2024-23122HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.7%CVE-2024-23123HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2024-23121HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2024-23132HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2024-23124HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%