2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:revit:2023:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"Revit","vendor":"Autodesk","versions":[{"lessThan":"2026.2","status":"affected","version":"2026","versionType":"custom"},{"lessThan":"2025.4.2","status":"affected","version":"2025","versionType":"custom"},{"lessThan":"2024.3.3","status":"affected","version":"2024","versionType":"custom"},{"lessThan":"2023.1.8","status":"affected","version":"2023","versionType":"custom"}]}],"source":"psirt@autodesk.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*","matchCriteriaId":"F441B410-A562-4443-B71D-3B90D0CB9822","versionEndExcluding":"2024.3.3","versionStartIncluding":"2024","vulnerable":true},{"criteria":"cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*","matchCriteriaId":"E1784137-30D2-4B15-B90F-D04D776E7F12","versionEndExcluding":"2025.4.2","versionStartIncluding":"2025","vulnerable":true},{"criteria":"cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*","matchCriteriaId":"0C81B830-67E4-452F-B0B1-70986E880968","versionEndExcluding":"2026.2","versionStartIncluding":"2026","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process."},{"lang":"es","value":"Un archivo RFA manipulado con fines maliciosos, al analizarse mediante Autodesk Revit, puede generar una vulnerabilidad de corrupción de memoria. Un agente malicioso puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto del proceso actual."}],"id":"CVE-2025-5037","lastModified":"2026-06-17T09:47:04.477","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"psirt@autodesk.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-5037","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-07-11T03:55:29.295364Z","version":"2.0.3"}}]},"published":"2025-07-10T12:15:23.173","references":[{"source":"psirt@autodesk.com","url":"https://www.autodesk.com/products/autodesk-access/overview"},{"source":"psirt@autodesk.com","tags":["Vendor Advisory"],"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0012"}],"sourceIdentifier":"psirt@autodesk.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-120"}],"source":"psirt@autodesk.com","type":"Secondary"}]}
|