CVE-2024-23144 - Vulnerability Details

Vendors	Products
Autodesk	Advance Steel Autocad Civil 3d

Link	Providers
https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009

Type	Values Removed	Values Added
Description	A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk applications, can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the context of the current process.	A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Type	Values Removed	Values Added
First Time appeared		Autodesk Autodesk advance Steel Autodesk autocad Autodesk civil 3d
CPEs		cpe:2.3:a:autodesk:advance_steel:2024:::::::* cpe:2.3:a:autodesk:autocad:2024:::::::* cpe:2.3:a:autodesk:civil_3d:2024:::::::*
Vendors & Products		Autodesk Autodesk advance Steel Autodesk autocad Autodesk civil 3d
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description	A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk applications, can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.	A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk applications, can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the context of the current process.
Title		Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
Metrics	cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-23144", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "state": "PUBLISHED", "assignerShortName": "autodesk", "dateReserved": "2024-01-11T21:51:08.013Z", "datePublished": "2024-06-25T02:10:02.389Z", "dateUpdated": "2025-02-10T21:00:57.694Z"}, "containers": {"cna": {"affected": [{"cpe": ["cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Architecture", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Electrical", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Mechanical", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD MEP", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Plant 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Civil 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Advance Steel", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD MAP 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\"><span style=\"background-color: rgb(255, 255, 255);\">A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.</span></span><br>"}], "value": "A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-02-10T21:00:57.694Z"}, "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}], "source": {"discovery": "EXTERNAL"}, "title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "autodesk", "product": "autocad", "cpes": ["cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2024", "status": "affected"}]}, {"vendor": "autodesk", "product": "advance_steel", "cpes": ["cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2024", "status": "affected"}]}, {"vendor": "autodesk", "product": "civil_3d", "cpes": ["cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2024", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-06-25T13:31:17.885600Z", "id": "CVE-2024-23144", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-25T13:31:22.080Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:59:31.414Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-23144 (string)

assignerOrgId : 7e40ea87-bc65-4944-9723-dd79dd760601 (string)

state : PUBLISHED (string)

assignerShortName : autodesk (string)

dateReserved : 2024-01-11T21:51:08.013Z (string)

datePublished : 2024-06-25T02:10:02.389Z (string)

dateUpdated : 2025-02-10T21:00:57.694Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

product : AutoCAD (string)

vendor : Autodesk (string)

versions : [ »

0 : { »

lessThan : 2025.1 (string)

status : affected (string)

version : 2025 (string)

versionType : custom (string)

}

1 : { »

lessThan : 2024.1.4 (string)

status : affected (string)

version : 2024 (string)

versionType : custom (string)

}

2 : { »

lessThan : 2023.1.6 (string)

status : affected (string)

version : 2023 (string)

versionType : custom (string)

}

3 : { »

lessThan : 2022.1.5 (string)

status : affected (string)

version : 2022 (string)

versionType : custom (string)

}

]

}

1 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

product : AutoCAD Architecture (string)

vendor : Autodesk (string)

versions : [ »

0 : { »

lessThan : 2025.1 (string)

status : affected (string)

version : 2025 (string)

versionType : custom (string)

}

1 : { »

lessThan : 2024.1.4 (string)

status : affected (string)

version : 2024 (string)

versionType : custom (string)

}

2 : { »

lessThan : 2023.1.6 (string)

status : affected (string)

version : 2023 (string)

versionType : custom (string)

}

3 : { »

lessThan : 2022.1.5 (string)

status : affected (string)

version : 2022 (string)

versionType : custom (string)

}

]

}

2 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

product : AutoCAD Electrical (string)

vendor : Autodesk (string)

versions : [ »

0 : { »

lessThan : 2025.1 (string)

status : affected (string)

version : 2025 (string)

versionType : custom (string)

}

1 : { »

lessThan : 2024.1.4 (string)

status : affected (string)

version : 2024 (string)

versionType : custom (string)

}

2 : { »

lessThan : 2023.1.6 (string)

status : affected (string)

version : 2023 (string)

versionType : custom (string)

}

3 : { »

lessThan : 2022.1.5 (string)

status : affected (string)

version : 2022 (string)

versionType : custom (string)

}

]

}

3 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

product : AutoCAD Mechanical (string)

vendor : Autodesk (string)

versions : [ »

0 : { »

lessThan : 2025.1 (string)

status : affected (string)

version : 2025 (string)

versionType : custom (string)

}

1 : { »

lessThan : 2024.1.4 (string)

status : affected (string)

version : 2024 (string)

versionType : custom (string)

}

2 : { »

lessThan : 2023.1.6 (string)

status : affected (string)

version : 2023 (string)

versionType : custom (string)

}

3 : { »

lessThan : 2022.1.5 (string)

status : affected (string)

version : 2022 (string)

versionType : custom (string)

}

]

}

4 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

product : AutoCAD MEP (string)

vendor : Autodesk (string)

versions : [ »

0 : { »

lessThan : 2025.1 (string)

status : affected (string)

version : 2025 (string)

versionType : custom (string)

}

1 : { »

lessThan : 2024.1.4 (string)

status : affected (string)

version : 2024 (string)

versionType : custom (string)

}

2 : { »

lessThan : 2023.1.6 (string)

status : affected (string)

version : 2023 (string)

versionType : custom (string)

}

3 : { »

lessThan : 2022.1.5 (string)

status : affected (string)

version : 2022 (string)

versionType : custom (string)

}

]

}

5 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

product : AutoCAD Plant 3D (string)

vendor : Autodesk (string)

versions : [ »

0 : { »

lessThan : 2025.1 (string)

status : affected (string)

version : 2025 (string)

versionType : custom (string)

}

1 : { »

lessThan : 2024.1.4 (string)

status : affected (string)

version : 2024 (string)

versionType : custom (string)

}

2 : { »

lessThan : 2023.1.6 (string)

status : affected (string)

version : 2023 (string)

versionType : custom (string)

}

3 : { »

lessThan : 2022.1.5 (string)

status : affected (string)

version : 2022 (string)

versionType : custom (string)

}

]

}

6 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

product : Civil 3D (string)

vendor : Autodesk (string)

versions : [ »

0 : { »

lessThan : 2025.1 (string)

status : affected (string)

version : 2025 (string)

versionType : custom (string)

}

1 : { »

lessThan : 2024.1.4 (string)

status : affected (string)

version : 2024 (string)

versionType : custom (string)

}

2 : { »

lessThan : 2023.1.6 (string)

status : affected (string)

version : 2023 (string)

versionType : custom (string)

}

3 : { »

lessThan : 2022.1.5 (string)

status : affected (string)

version : 2022 (string)

versionType : custom (string)

}

]

}

7 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

product : Advance Steel (string)

vendor : Autodesk (string)

versions : [ »

0 : { »

lessThan : 2025.1 (string)

status : affected (string)

version : 2025 (string)

versionType : custom (string)

}

1 : { »

lessThan : 2024.1.4 (string)

status : affected (string)

version : 2024 (string)

versionType : custom (string)

}

2 : { »

lessThan : 2023.1.6 (string)

status : affected (string)

version : 2023 (string)

versionType : custom (string)

}

3 : { »

lessThan : 2022.1.5 (string)

status : affected (string)

version : 2022 (string)

versionType : custom (string)

}

]

}

8 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

product : AutoCAD MAP 3D (string)

vendor : Autodesk (string)

versions : [ »

0 : { »

lessThan : 2025.1 (string)

status : affected (string)

version : 2025 (string)

versionType : custom (string)

}

1 : { »

lessThan : 2024.1.4 (string)

status : affected (string)

version : 2024 (string)

versionType : custom (string)

}

2 : { »

lessThan : 2023.1.6 (string)

status : affected (string)

version : 2023 (string)

versionType : custom (string)

}

3 : { »

lessThan : 2022.1.5 (string)

status : affected (string)

version : 2022 (string)

versionType : custom (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. (string)

}

]

value : A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-100 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-100 Overflow Buffers (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-787 (string)

description : CWE-787 Out-of-bounds Write (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 7e40ea87-bc65-4944-9723-dd79dd760601 (string)

shortName : autodesk (string)

dateUpdated : 2025-02-10T21:00:57.694Z (string)

}

references : [ »

0 : { »

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 (string)

}

]

source : { »

discovery : EXTERNAL (string)

}

title : Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : autodesk (string)

product : autocad (string)

cpes : [ »

0 : cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 2024 (string)

status : affected (string)

}

]

}

1 : { »

vendor : autodesk (string)

product : advance_steel (string)

cpes : [ »

0 : cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 2024 (string)

status : affected (string)

}

]

}

2 : { »

vendor : autodesk (string)

product : civil_3d (string)

cpes : [ »

0 : cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 2024 (string)

status : affected (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 8.8 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-06-25T13:31:17.885600Z (string)

id : CVE-2024-23144 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-25T13:31:22.080Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T22:59:31.414Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:59:31.414Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-23144", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-06-25T13:31:17.885600Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "autocad", "versions": [{"status": "affected", "version": "2024"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "advance_steel", "versions": [{"status": "affected", "version": "2024"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "civil_3d", "versions": [{"status": "affected", "version": "2024"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-25T13:31:16.054Z"}}], "cna": {"title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpe": ["cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Architecture", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Electrical", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Mechanical", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD MEP", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Plant 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Civil 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Advance Steel", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD MAP 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\"><span style=\"background-color: rgb(255, 255, 255);\">A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.</span></span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-02-10T21:00:57.694Z"}}}, "cveMetadata": {"cveId": "CVE-2024-23144", "state": "PUBLISHED", "dateUpdated": "2025-02-10T21:00:57.694Z", "dateReserved": "2024-01-11T21:51:08.013Z", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "datePublished": "2024-06-25T02:10:02.389Z", "assignerShortName": "autodesk"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T22:59:31.414Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 8.8 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-23144 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-06-25T13:31:17.885600Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:* (string)

]

vendor : autodesk (string)

product : autocad (string)

versions : [ »

0 : { »

status : affected (string)

version : 2024 (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:* (string)

]

vendor : autodesk (string)

product : advance_steel (string)

versions : [ »

0 : { »

status : affected (string)

version : 2024 (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:* (string)

]

vendor : autodesk (string)

product : civil_3d (string)

versions : [ »

0 : { »

status : affected (string)

version : 2024 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-25T13:31:16.054Z (string)

}

]

cna : { »

title : Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (string)

source : { »

discovery : EXTERNAL (string)

}

impacts : [ »

0 : { »

capecId : CAPEC-100 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-100 Overflow Buffers (string)

}

]

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.8 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:* (string)

]

vendor : Autodesk (string)

product : AutoCAD (string)

versions : [ »

0 : { »

status : affected (string)

version : 2025 (string)

lessThan : 2025.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2024 (string)

lessThan : 2024.1.4 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2023 (string)

lessThan : 2023.1.6 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2022 (string)

lessThan : 2022.1.5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:* (string)

]

vendor : Autodesk (string)

product : AutoCAD Architecture (string)

versions : [ »

0 : { »

status : affected (string)

version : 2025 (string)

lessThan : 2025.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2024 (string)

lessThan : 2024.1.4 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2023 (string)

lessThan : 2023.1.6 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2022 (string)

lessThan : 2022.1.5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

2 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:* (string)

]

vendor : Autodesk (string)

product : AutoCAD Electrical (string)

versions : [ »

0 : { »

status : affected (string)

version : 2025 (string)

lessThan : 2025.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2024 (string)

lessThan : 2024.1.4 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2023 (string)

lessThan : 2023.1.6 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2022 (string)

lessThan : 2022.1.5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

3 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:* (string)

]

vendor : Autodesk (string)

product : AutoCAD Mechanical (string)

versions : [ »

0 : { »

status : affected (string)

version : 2025 (string)

lessThan : 2025.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2024 (string)

lessThan : 2024.1.4 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2023 (string)

lessThan : 2023.1.6 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2022 (string)

lessThan : 2022.1.5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

4 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:* (string)

]

vendor : Autodesk (string)

product : AutoCAD MEP (string)

versions : [ »

0 : { »

status : affected (string)

version : 2025 (string)

lessThan : 2025.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2024 (string)

lessThan : 2024.1.4 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2023 (string)

lessThan : 2023.1.6 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2022 (string)

lessThan : 2022.1.5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

5 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:* (string)

]

vendor : Autodesk (string)

product : AutoCAD Plant 3D (string)

versions : [ »

0 : { »

status : affected (string)

version : 2025 (string)

lessThan : 2025.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2024 (string)

lessThan : 2024.1.4 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2023 (string)

lessThan : 2023.1.6 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2022 (string)

lessThan : 2022.1.5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

6 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:* (string)

]

vendor : Autodesk (string)

product : Civil 3D (string)

versions : [ »

0 : { »

status : affected (string)

version : 2025 (string)

lessThan : 2025.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2024 (string)

lessThan : 2024.1.4 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2023 (string)

lessThan : 2023.1.6 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2022 (string)

lessThan : 2022.1.5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

7 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:* (string)

]

vendor : Autodesk (string)

product : Advance Steel (string)

versions : [ »

0 : { »

status : affected (string)

version : 2025 (string)

lessThan : 2025.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2024 (string)

lessThan : 2024.1.4 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2023 (string)

lessThan : 2023.1.6 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2022 (string)

lessThan : 2022.1.5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

8 : { »

cpe : [ »

0 : cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:* (string)

2 : cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:* (string)

3 : cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:* (string)

]

vendor : Autodesk (string)

product : AutoCAD MAP 3D (string)

versions : [ »

0 : { »

status : affected (string)

version : 2025 (string)

lessThan : 2025.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 2024 (string)

lessThan : 2024.1.4 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 2023 (string)

lessThan : 2023.1.6 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 2022 (string)

lessThan : 2022.1.5 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-787 (string)

description : CWE-787 Out-of-bounds Write (string)

}

]

}

]

providerMetadata : { »

orgId : 7e40ea87-bc65-4944-9723-dd79dd760601 (string)

shortName : autodesk (string)

dateUpdated : 2025-02-10T21:00:57.694Z (string)

}

cveMetadata : { »

cveId : CVE-2024-23144 (string)

state : PUBLISHED (string)

dateUpdated : 2025-02-10T21:00:57.694Z (string)

dateReserved : 2024-01-11T21:51:08.013Z (string)

assignerOrgId : 7e40ea87-bc65-4944-9723-dd79dd760601 (string)

datePublished : 2024-06-25T02:10:02.389Z (string)

assignerShortName : autodesk (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Un archivo CATPART creado con fines malintencionados, cuando se analiza en CC5Dll.dll y ASMBASE228A.dll mediante aplicaciones de Autodesk, puede forzar una escritura fuera de los l\u00edmites. Un actor malintencionado puede aprovechar esta vulnerabilidad para provocar un bloqueo, leer datos confidenciales o ejecutar c\u00f3digo arbitrario en el contexto del proceso actual."}], "id": "CVE-2024-23144", "lastModified": "2025-02-10T21:15:17.983", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@autodesk.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-06-25T02:15:11.293", "references": [{"source": "psirt@autodesk.com", "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "psirt@autodesk.com", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. (string)

}

1 : { »

lang : es (string)

value : Un archivo CATPART creado con fines malintencionados, cuando se analiza en CC5Dll.dll y ASMBASE228A.dll mediante aplicaciones de Autodesk, puede forzar una escritura fuera de los límites. Un actor malintencionado puede aprovechar esta vulnerabilidad para provocar un bloqueo, leer datos confidenciales o ejecutar código arbitrario en el contexto del proceso actual. (string)

}

]

id : CVE-2024-23144 (string)

lastModified : 2025-02-10T21:15:17.983 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : psirt@autodesk.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-06-25T02:15:11.293 (string)

references : [ »

0 : { »

source : psirt@autodesk.com (string)

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 (string)

}

]

sourceIdentifier : psirt@autodesk.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-787 (string)

}

]

source : psirt@autodesk.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object