CVE-2023-25004

CWE-190 — Integer Overflow3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 72.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
17
Autodesk AliasAutodesk AutocadAutodesk Autocad Advance Steel+14 more
Timeline
PublishedJun 27

Description

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages18 packages

▶CVEListV5autodesk_products2023, 2022, 2021, 2020
▶NVDautodesk/vred2023 — 2023.4
▶NVDautodesk/alias2023 — 2023.1.1
▶NVDautodesk/revit2021 — 2021.1.8
▶NVDautodesk/autocad2020 — 2020.1.6+3

🔴Vulnerability Details

2
CVEList
CVE-2023-25004: A maliciously crafted pskernel↗2023-06-27
▶
GHSA
GHSA-2w8c-hj6v-28vw: A maliciously crafted pskernel↗2023-06-27
▶