Autodesk Vred vulnerabilities

6 CVEs affecting Autodesk Vred, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-7995, published 2024-11-05.

More from Autodesk.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-2967, published 2014-07-07. High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days. Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server.
• CVE-2023-25002, published 2023-06-27. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
• CVE-2023-25003, published 2023-06-23. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to…
• CVE-2023-29068, published 2023-06-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code…
• CVE-2023-25004, published 2023-06-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.
• CVE-2024-7995, published 2024-11-05. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application.…