Vulnerability Details CVE-2021-40159
An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.1%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002
- https://www.zerodayinitiative.com/advisories/ZDI-22-282/
- https://www.zerodayinitiative.com/advisories/ZDI-22-289/
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002
- https://www.zerodayinitiative.com/advisories/ZDI-22-282/
- https://www.zerodayinitiative.com/advisories/ZDI-22-289/
Products affected by CVE-2021-40159
-
cpe:2.3:a:autodesk:advance_steel:2022
-
cpe:2.3:a:autodesk:advance_steel:2022.0.1
-
cpe:2.3:a:autodesk:autocad:2022
-
cpe:2.3:a:autodesk:autocad:2022.0.1
-
cpe:2.3:a:autodesk:autocad:2022.1
-
cpe:2.3:a:autodesk:autocad_architecture:2022
-
cpe:2.3:a:autodesk:autocad_architecture:2022.0.1
-
cpe:2.3:a:autodesk:autocad_electrical:2022
-
cpe:2.3:a:autodesk:autocad_electrical:2022.0.1
-
cpe:2.3:a:autodesk:autocad_lt:2022
-
cpe:2.3:a:autodesk:autocad_lt:2022.0.1
-
cpe:2.3:a:autodesk:autocad_lt:2022.1
-
cpe:2.3:a:autodesk:autocad_map_3d:2022
-
cpe:2.3:a:autodesk:autocad_map_3d:2022.0.1
-
cpe:2.3:a:autodesk:autocad_mechanical:2022
-
cpe:2.3:a:autodesk:autocad_mechanical:2022.0.1
-
cpe:2.3:a:autodesk:autocad_mep:2022
-
cpe:2.3:a:autodesk:autocad_mep:2022.0.1
-
cpe:2.3:a:autodesk:autocad_plant_3d:2022
-
cpe:2.3:a:autodesk:autocad_plant_3d:2022.0.1
-
cpe:2.3:a:autodesk:civil_3d:2022
-
cpe:2.3:a:autodesk:civil_3d:2022.0.1
-
cpe:2.3:a:autodesk:civil_3d:2022.1.1
-
cpe:2.3:a:autodesk:inventor:2019
-
cpe:2.3:a:autodesk:inventor:2020
-
cpe:2.3:a:autodesk:inventor:2021
-
cpe:2.3:a:autodesk:inventor:2022