Unscored severity · published Jul 7, 2014
CVE-2014-2967
Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server
–
CVSS
5.1%
EPSS
No
On KEV
Description
Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.1% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VR
Vred · Autodesk
2014 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2967
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2967
US Government Resource
http://www.kb.cert.org/vuls/id/402020
More from Vred
7.8
CVE-2024-7995
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design…
7.8
CVE-2023-25002
A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability
7.8
CVE-2023-29068
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities
7.8
CVE-2023-25004
A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities
7.8
CVE-2023-25003
A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities