CVE-2021-40156: High severity Autodesk Navisworks vulnerability
Published Sep 15, 2021
·Updated
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.
Affected Software
4 affected components
Autodesk Navisworks=2019
Autodesk Navisworks=2020
Autodesk Navisworks=2021
Autodesk Navisworks=2022
Event History
Sep 15, 2021
CVE Published
via MITRE·04:35 PM
Data Sourced
via MITRE·04:35 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-40156?
The severity of CVE-2021-40156 is high with a CVSS score of 7.8.
2
How does CVE-2021-40156 affect Autodesk Navisworks?
CVE-2021-40156 affects Autodesk Navisworks versions 2019, 2020, 2021, and 2022.
3
Can CVE-2021-40156 be exploited to execute arbitrary code?
Yes, CVE-2021-40156 can be exploited to execute arbitrary code.
4
How can I fix CVE-2021-40156?
To fix CVE-2021-40156, users should update to the latest version of Autodesk Navisworks.
5
Where can I find more information about CVE-2021-40156?
More information about CVE-2021-40156 can be found on the Autodesk Security Advisories page.