Home » Autodesk AutoCAD: IT safety vulnerability at excessive danger! Alert is getting an replace

Autodesk AutoCAD: IT safety vulnerability at excessive danger! Alert is getting an replace

by admin
Autodesk AutoCAD: IT safety vulnerability at excessive danger!  Alert is getting an replace

As BSI reviews, an IT safety warning a few recognized vulnerability in Autodesk AutoCAD has acquired an replace. You can learn an outline of the safety hole together with the most recent updates and details about affected working techniques and merchandise right here.

Federal workplace for Security in Information Technology (BSI) revealed an replace on June 2, 2024 relating to the Autodesk AutoCAD safety vulnerability recognized on February 12, 2024. The safety vulnerability impacts the Windows working system and the Autodesk AutoCAD product.

The newest producer suggestions for updates, workarounds and safety patches for this vulnerability will be discovered right here: Autodesk Security Advisory ADSK-SA-2024-0009 (From May 31, 2024). Some helpful sources are listed later on this article.

Autodesk AutoCAD Security Advisory – Risk: High

Risk degree: 4 (excessive)
CVSS Base Score: 7.8
CVSS provisional rating: 7,1
Remote assault: No

The Common Vulnerability Scoring System (CVSS) is used to evaluate the severity of safety vulnerabilities in laptop techniques. The CVSS normal makes it doable to check potential or precise safety dangers primarily based on numerous metrics to be able to prioritize countermeasures. The attributes “none”, “low”, “medium”, “excessive” and “extreme” are used to find out the severity ranges of vulnerability. The Base Score evaluates the necessities of an assault (together with authentication, complexity, privileges, person interplay) and its outcomes. For momentary impact, body circumstances that will change over time are thought of within the check. According to CVSS, the severity of the vulnerability talked about right here is rated as “excessive” with a base rating of seven.8.

See also  Starfield's Lead Quest Designer, Will Shen, Leaves Bethesda to Develop Open Source World RPG

Autodesk AutoCAD Bug: Multiple vulnerabilities permit code execution

AutoCAD is a part of Autodesk’s CAD (Computer Aided Design) product line.

A distant, unknown attacker may exploit a number of vulnerabilities in Autodesk AutoCAD to execute arbitrary code.

Vulnerabilities are numbered for every product utilizing the CVE (Common Vulnerabilities and Exposures) reference system. CVE-2024-0446, CVE-2024-23120, CVE-2024-23121, CVE-2024-23122, CVE-2024-23123, CVE-2024-23124, CVE-2024-2312-122, CVE-2312425, 2024- 23127, CVE-2024-23128, CVE-2024-23129, CVE-2024-23130, CVE-2024-23131, CVE-2024-23132, CVE-2024-2332-3024VE-24VE 23135, CVE-2024-23136 and -CVE-2024-23137.

Systems affected by the safety hole at a look

working system
Windows

Products
Autodesk AutoCAD (cpe:/a:autodesk:autocad)
Autodesk AutoCAD

Common steps to deal with IT safety gaps

  1. Users of the affected apps ought to keep up-to-date. When safety holes are recognized, producers are required to repair them shortly by creating a patch or workaround. If safety patches can be found, set up them instantly.
  2. For info, see the sources listed within the subsequent part. This typically comprises further details about the most recent model of the software program in query and the provision of safety patches or efficiency suggestions.
  3. If you might have any additional questions or uncertainties, please contact your accountable administrator. IT safety managers ought to commonly examine the desired sources to see if a brand new safety replace is out there.

Sources for updates, patches and workarounds

Here you will discover some hyperlinks with details about bug reviews, safety fixes and workarounds.

Autodesk Security Advisory ADSK-SA-2024-0009 vom 2024-05-31 (02.06.2024)
For extra info, see:

Autodesk Security Advisory ADSK-SA-2024-0004 vom 2024-02-29 (29.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

See also  What is 'X', the super app that Elon Musk wants to create

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

See also  Price increase at Telekom: Fixed network tariffs are becoming more expensive

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

ZDI Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

AutoDesk Security Advisory vom 2024-02-12 (12.02.2024)
For extra info, see:

Version historical past of this safety alert

This is model 5 of this Autodesk AutoCAD IT Security Notice. This doc can be up to date as extra updates are introduced. You can see the adjustments made utilizing the model historical past beneath.

02/12/2024 – First model
02/15/2024 – Reference added: AutoDesk
21.02.2024 – CVE added
02/29/2024 – New updates from Autodesk added
June 2, 2024 – New updates from Autodesk added

+++ Editorial observe: This doc is predicated on present BSI information and can be up to date in a data-driven method relying on the standing of the alert. We welcome suggestions and feedback at [email protected]. +++

observe News.de you might be right here Facebook, Twitter, Pinterest once more YouTube? Here you will discover scorching information, present movies and a direct line to the editorial staff.

kns/roj/information.de

You may also like

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Read More

Privacy & Cookies Policy