High severity · published Jun 27, 2023
CVE-2023-29068
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AL
Alias · Autodesk
2023 before 2023.1.1 · source: NVD
AU
Autocad · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
AA
Autocad Advance Steel · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
AA
Autocad Architecture · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
AC
Autocad Civil 3d · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
AE
Autocad Electrical · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
AL
Autocad LT · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
AM
Autocad Map 3d · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
AM
Autocad Mechanical · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
AM
Autocad Mep · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
AP
Autocad Plant 3d · Autodesk
2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 · source: NVD
IN
Infraworks · Autodesk
2021 before 2021.2; 2022 before 2022.1; 2023 before 2023.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-29068
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-29068
Vendor Advisory
https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0009
More from Alias
7.8
CVE-2023-25004
A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities
7.8
CVE-2023-25003
A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities