Vulnerability in Autodesk Advance Steel
CVE-2019-7364
DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.019 (78.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 79th percentile — 78.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.019 · newest: 0.019 · change: 0.000
Affected products
- Autodesk Advance Steel — versions 2017, 2018, 2019
- Autodesk Autocad — versions 2017, 2018, 2019
- Autodesk Autocad Architecture — versions 2017, 2018, 2019
- Autodesk Autocad Electrical — versions 2017, 2018, 2019
- Autodesk Autocad Lt — versions 2017, 2018, 2019
- Autodesk Autocad Map 3d — versions 2017, 2018, 2019
- Autodesk Autocad Mechanical — versions 2017, 2018, 2019
- Autodesk Autocad Mep — versions 2017, 2018, 2019
- Autodesk Autocad P\&id — versions 2017
- Autodesk Autocad Plant 3d — versions 2017, 2018, 2019
Weakness classification (CWE)
References
- www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002 (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-7364?
- CVE-2019-7364 is a high-severity vulnerability in Autodesk Advance Steel, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2019-08-23.
- How severe is CVE-2019-7364?
- High severity. CVSS v3 base score is 7.8 out of 10.