High severity · published Oct 3, 2022
CVE-2022-33883
A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption…
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material ·
2021, 2019 · source: vendor
AM
Advanced Material Exchange · Autodesk
2019; 2021 · source: NVD
MA
Moldflow Adviser · Autodesk
2019; 2021 · source: NVD
MC
Moldflow Communicator · Autodesk
2019; 2021 · source: NVD
MS
Moldflow Synergy · Autodesk
2019; 2021 · source: NVD
Affected product
MS
Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material