CVE-2022-42945
published 2022-12-19CVE-2022-42945: DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code…
PriorityP336high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.27%
19.1th percentile
DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| autodesk | dwg_trueview | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Autodesk DWG TrueViewTM 2023 uncontrolled search path (EUVD-2022-46001)
vuldb·2026-08-29·CVSS 7.8
CVE-2022-42945 [HIGH] Autodesk DWG TrueViewTM 2023 uncontrolled search path (EUVD-2022-46001)
A vulnerability, which was classified as critical, was found in Autodesk DWG TrueViewTM 2023. This impacts an unknown function. Such manipulation leads to uncontrolled search path.
This vulnerability is uniquely identified as CVE-2022-42945. The attack can be launched remotely. No exploit exists.
GHSA
GHSA-fx95-q83h-x9m8: DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability
ghsa_unreviewed·2022-12-19
CVE-2022-42945 [HIGH] CWE-427 GHSA-fx95-q83h-x9m8: DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability
DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-19
Published