CVE-2021-40159

· HIGHModified

← All CVEs

CVSS v3.1

7.8

EPSS

2.30%

Published

Jan 25, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-200

Affected Products (14)

autodesk · advance_steel (up to 2022.1.2)vulnerable

autodesk · autocad (up to 2022.1.2)vulnerable

autodesk · autocad_architecture (up to 2022.1.2)vulnerable

autodesk · autocad_electrical (up to 2022.1.2)vulnerable

autodesk · autocad_lt (up to 2022.1.2)vulnerable

autodesk · autocad_map_3d (up to 2022.1.2)vulnerable

autodesk · autocad_mechanical (up to 2022.1.2)vulnerable

autodesk · autocad_mep (up to 2022.1.2)vulnerable

autodesk · autocad_plant_3d (up to 2022.1.2)vulnerable

autodesk · civil_3d (up to 2022.1.2)vulnerable

autodesk · inventorvulnerable

References (6)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-22-282/

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-22-289/

Third Party AdvisoryVDB Entry

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-22-282/

Third Party AdvisoryVDB Entry

https://www.zerodayinitiative.com/advisories/ZDI-22-289/

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs