CVE-2024-7670highCWE-125

CVE-2024-7670: falha de alta gravidade em Autodesk Navisworks Freedom

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Navisworks Freedom+ Monitorar Navisworks Manage

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.2%
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Autodesk · Navisworks FreedomAutodesk · Navisworks ManageAutodesk · Navisworks Simulate
CVEs relacionadas — Autodesk Navisworks Freedom

No mesmo produto, das mais perigosas para as menos.

CVE-2024-11422HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.4%CVE-2024-12198HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12671HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12670HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12179HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12178HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%