CVE-2014-0818
AutoCAD 2013 G.55.0.0 Untrusted Search Path
Severity Score
7.3
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path.
Vulnerabilidad de ruta (path) de búsqueda no confiable en AutoCAD de Autodesk anterior al 2014, permite a los usuarios locales alcanzar privilegios y ejecutar código VBScript arbitrario por medio de un archivo FAS de tipo caballo de Troya en la ruta de búsqueda de archivos FAS.
AutoCAD 2013 and earlier versions contained untrusted search path vulnerabilities. When AutoCAD loads FAS or DLL files, it searches for these files in the current working directory.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-01-06 CVE Reserved
- 2014-02-22 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://jvn.jp/en/jp/JVN33382534/index.html | Third Party Advisory | |
| http://jvndb.jvn.jp/jvndb/JVNDB-2014-000019 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|