CVE-2024-12671highCWE-787

CVE-2024-12671: falha de alta gravidade em Autodesk Navisworks Freedom

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Navisworks Freedom+ Monitorar Navisworks Manage

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.3%
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Autodesk · Navisworks FreedomAutodesk · Navisworks ManageAutodesk · Navisworks Simulate
CVEs relacionadas — Autodesk Navisworks Freedom

No mesmo produto, das mais perigosas para as menos.

CVE-2024-11422HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.4%CVE-2024-12198HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12670HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12179HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12178HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12200HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%