by Kastro
Paper/Archive/CVE-2022-33882

CVE-2022-33882

autodesk — Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operati…

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 63.4.634 × 2012.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operation in Autodesk desktop app (ADA). An attacker could leverage this vulnerability to escalate privileges and execute arbitrary code.

Affected

ProductAffectedFixed inSource
Autodesk desktop app8.4.0.50 and prior versions–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refautodesk.com/trust/security-advisories/adsk-sa-2022-0015