CVE-2024-37002: Autodesk Advance Steel

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Affected products

• Autodesk Advance Steel: from 2022, before 2022.1.5 (fixed in 2022.1.5); from 2023, before 2023.1.6 (fixed in 2023.1.6); from 2024, before 2024.1.4 (fixed in 2024.1.4); from 2025, before 2025.1 (fixed in 2025.1)
• Autodesk Autocad: from 2022, before 2022.1.5 (fixed in 2022.1.5); from 2023, before 2023.1.6 (fixed in 2023.1.6); from 2024, before 2024.1.4 (fixed in 2024.1.4); from 2025, before 2025.1 (fixed in 2025.1)
• Autodesk Autocad Architecture: from 2022, before 2022.1.5 (fixed in 2022.1.5); from 2023, before 2023.1.6 (fixed in 2023.1.6); from 2024, before 2024.1.4 (fixed in 2024.1.4); from 2025, before 2025.1 (fixed in 2025.1)
• Autodesk Autocad Electrical: from 2022, before 2022.1.5 (fixed in 2022.1.5); from 2023, before 2023.1.6 (fixed in 2023.1.6); from 2024, before 2024.1.4 (fixed in 2024.1.4); from 2025, before 2025.1 (fixed in 2025.1)
• Autodesk Autocad Map 3d: from 2022, before 2022.1.5 (fixed in 2022.1.5); from 2023, before 2023.1.6 (fixed in 2023.1.6); from 2024, before 2024.1.4 (fixed in 2024.1.4); from 2025, before 2025.1 (fixed in 2025.1)
• Autodesk Autocad Mechanical: from 2022, before 2022.1.5 (fixed in 2022.1.5); from 2023, before 2023.1.6 (fixed in 2023.1.6); from 2024, before 2024.1.4 (fixed in 2024.1.4); from 2025, before 2025.1 (fixed in 2025.1)
• Autodesk Autocad Mep: from 2022, before 2022.1.5 (fixed in 2022.1.5); from 2023, before 2023.1.6 (fixed in 2023.1.6); from 2024, before 2024.1.4 (fixed in 2024.1.4); from 2025, before 2025.1 (fixed in 2025.1)
• Autodesk Autocad Plant 3d: from 2022, before 2022.1.5 (fixed in 2022.1.5); from 2023, before 2023.1.6 (fixed in 2023.1.6); from 2024, before 2024.1.4 (fixed in 2024.1.4); from 2025, before 2025.1 (fixed in 2025.1)
• Autodesk Civil 3d: from 2022, before 2022.1.5 (fixed in 2022.1.5); from 2023, before 2023.1.6 (fixed in 2023.1.6); from 2024, before 2024.1.4 (fixed in 2024.1.4); from 2025, before 2025.1 (fixed in 2025.1)

Published 2024-06-25. Last modified 2026-06-17.