CVE-2019-7364
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.
Vulnerabilidad de precarga de DLL en las versiones 2017, 2018, 2019 y 2020 de Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D y la versión 2017 de AutoCAD P&ID. Un atacante puede engañar a un usuario para que abra un archivo DWG malicioso que puede aprovechar una vulnerabilidad de precarga de DLL en AutoCAD que puede provocar la ejecución del código.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-02-04 CVE Reserved
- 2019-08-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-427: Uncontrolled Search Path Element
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002 | 2019-09-03 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Autodesk Search vendor "Autodesk" | Advance Steel Search vendor "Autodesk" for product "Advance Steel" | 2017 Search vendor "Autodesk" for product "Advance Steel" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Advance Steel Search vendor "Autodesk" for product "Advance Steel" | 2018 Search vendor "Autodesk" for product "Advance Steel" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Advance Steel Search vendor "Autodesk" for product "Advance Steel" | 2019 Search vendor "Autodesk" for product "Advance Steel" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Advance Steel Search vendor "Autodesk" for product "Advance Steel" | 2020 Search vendor "Autodesk" for product "Advance Steel" and version "2020" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Search vendor "Autodesk" for product "Autocad" | 2017 Search vendor "Autodesk" for product "Autocad" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Search vendor "Autodesk" for product "Autocad" | 2018 Search vendor "Autodesk" for product "Autocad" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Search vendor "Autodesk" for product "Autocad" | 2019 Search vendor "Autodesk" for product "Autocad" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Search vendor "Autodesk" for product "Autocad" | 2020 Search vendor "Autodesk" for product "Autocad" and version "2020" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Architecture Search vendor "Autodesk" for product "Autocad Architecture" | 2017 Search vendor "Autodesk" for product "Autocad Architecture" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Architecture Search vendor "Autodesk" for product "Autocad Architecture" | 2018 Search vendor "Autodesk" for product "Autocad Architecture" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Architecture Search vendor "Autodesk" for product "Autocad Architecture" | 2019 Search vendor "Autodesk" for product "Autocad Architecture" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Architecture Search vendor "Autodesk" for product "Autocad Architecture" | 2020 Search vendor "Autodesk" for product "Autocad Architecture" and version "2020" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Electrical Search vendor "Autodesk" for product "Autocad Electrical" | 2017 Search vendor "Autodesk" for product "Autocad Electrical" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Electrical Search vendor "Autodesk" for product "Autocad Electrical" | 2018 Search vendor "Autodesk" for product "Autocad Electrical" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Electrical Search vendor "Autodesk" for product "Autocad Electrical" | 2019 Search vendor "Autodesk" for product "Autocad Electrical" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Electrical Search vendor "Autodesk" for product "Autocad Electrical" | 2020 Search vendor "Autodesk" for product "Autocad Electrical" and version "2020" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Lt Search vendor "Autodesk" for product "Autocad Lt" | 2017 Search vendor "Autodesk" for product "Autocad Lt" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Lt Search vendor "Autodesk" for product "Autocad Lt" | 2018 Search vendor "Autodesk" for product "Autocad Lt" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Lt Search vendor "Autodesk" for product "Autocad Lt" | 2019 Search vendor "Autodesk" for product "Autocad Lt" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Lt Search vendor "Autodesk" for product "Autocad Lt" | 2020 Search vendor "Autodesk" for product "Autocad Lt" and version "2020" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Map 3d Search vendor "Autodesk" for product "Autocad Map 3d" | 2017 Search vendor "Autodesk" for product "Autocad Map 3d" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Map 3d Search vendor "Autodesk" for product "Autocad Map 3d" | 2018 Search vendor "Autodesk" for product "Autocad Map 3d" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Map 3d Search vendor "Autodesk" for product "Autocad Map 3d" | 2019 Search vendor "Autodesk" for product "Autocad Map 3d" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Map 3d Search vendor "Autodesk" for product "Autocad Map 3d" | 2020 Search vendor "Autodesk" for product "Autocad Map 3d" and version "2020" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Mechanical Search vendor "Autodesk" for product "Autocad Mechanical" | 2017 Search vendor "Autodesk" for product "Autocad Mechanical" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Mechanical Search vendor "Autodesk" for product "Autocad Mechanical" | 2018 Search vendor "Autodesk" for product "Autocad Mechanical" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Mechanical Search vendor "Autodesk" for product "Autocad Mechanical" | 2019 Search vendor "Autodesk" for product "Autocad Mechanical" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Mechanical Search vendor "Autodesk" for product "Autocad Mechanical" | 2020 Search vendor "Autodesk" for product "Autocad Mechanical" and version "2020" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Mep Search vendor "Autodesk" for product "Autocad Mep" | 2017 Search vendor "Autodesk" for product "Autocad Mep" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Mep Search vendor "Autodesk" for product "Autocad Mep" | 2018 Search vendor "Autodesk" for product "Autocad Mep" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Mep Search vendor "Autodesk" for product "Autocad Mep" | 2019 Search vendor "Autodesk" for product "Autocad Mep" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Mep Search vendor "Autodesk" for product "Autocad Mep" | 2020 Search vendor "Autodesk" for product "Autocad Mep" and version "2020" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad P\&id Search vendor "Autodesk" for product "Autocad P\&id" | 2017 Search vendor "Autodesk" for product "Autocad P\&id" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Plant 3d Search vendor "Autodesk" for product "Autocad Plant 3d" | 2017 Search vendor "Autodesk" for product "Autocad Plant 3d" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Plant 3d Search vendor "Autodesk" for product "Autocad Plant 3d" | 2018 Search vendor "Autodesk" for product "Autocad Plant 3d" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Plant 3d Search vendor "Autodesk" for product "Autocad Plant 3d" | 2019 Search vendor "Autodesk" for product "Autocad Plant 3d" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Autocad Plant 3d Search vendor "Autodesk" for product "Autocad Plant 3d" | 2020 Search vendor "Autodesk" for product "Autocad Plant 3d" and version "2020" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Civil 3d Search vendor "Autodesk" for product "Civil 3d" | 2017 Search vendor "Autodesk" for product "Civil 3d" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Civil 3d Search vendor "Autodesk" for product "Civil 3d" | 2018 Search vendor "Autodesk" for product "Civil 3d" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Civil 3d Search vendor "Autodesk" for product "Civil 3d" | 2019 Search vendor "Autodesk" for product "Civil 3d" and version "2019" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Civil 3d Search vendor "Autodesk" for product "Civil 3d" | 2020 Search vendor "Autodesk" for product "Civil 3d" and version "2020" | - |
Affected
| ||||||