Vulnerability in Autodesk Advance Steel
CVE-2019-7364
DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.
EPSS: 0.019 (77.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Autodesk Advance_steel — versions 2017, 2018, 2019
- Autodesk Autocad — versions 2017, 2018, 2019
- Autodesk Autocad_architecture — versions 2017, 2018, 2019
- Autodesk Autocad_electrical — versions 2017, 2018, 2019
- Autodesk Autocad_lt — versions 2017, 2018, 2019
- Autodesk Autocad_map_3d — versions 2017, 2018, 2019
- Autodesk Autocad_mechanical — versions 2017, 2018, 2019
- Autodesk Autocad_mep — versions 2017, 2018, 2019
- Autodesk Autocad_p\&id — versions 2017
- Autodesk Autocad_plant_3d — versions 2017, 2018, 2019
Weakness classification (CWE)
References
- psirt@autodesk.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-7364?
- CVE-2019-7364 is a high-severity vulnerability in Autodesk Advance Steel, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2019-08-23.
- How severe is CVE-2019-7364?
- High severity. CVSS v3 base score is 7.8 out of 10.