CVE-2022-33883
First published: Mon Oct 03 2022(Updated: )
A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Credit: psirt@autodesk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Autodesk Advanced Material Exchange | =2019 | |
| Autodesk Advanced Material Exchange | =2021 | |
| Autodesk Moldflow Adviser | =2019 | |
| Autodesk Moldflow Adviser | =2021 | |
| Autodesk Moldflow Communicator | =2019 | |
| Autodesk Moldflow Communicator | =2021 | |
| Autodesk Moldflow Synergy | =2019 | |
| Autodesk Moldflow Synergy | =2021 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2022-33883?
CVE-2022-33883 is considered a high severity vulnerability due to the potential for code execution from memory corruption.
How do I fix CVE-2022-33883?
To fix CVE-2022-33883, users should update their Autodesk Moldflow and Advanced Material Exchange applications to the latest patched versions.
Which versions of Autodesk software are affected by CVE-2022-33883?
CVE-2022-33883 affects Autodesk Moldflow Adviser, Moldflow Communicator, Moldflow Synergy, and Advanced Material Exchange versions 2019 and 2021.
What types of attacks can exploit CVE-2022-33883?
CVE-2022-33883 can be exploited by using a maliciously crafted file that leads to memory corruption, potentially allowing for arbitrary code execution.
Is CVE-2022-33883 a local or remote vulnerability?
CVE-2022-33883 can be exploited locally, as it requires opening a compromised file within the affected Autodesk applications.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/author
- agent/first-publish-date
- agent/tags
- agent/event
- agent/source
- vendor/autodesk
- canonical/autodesk advanced material exchange
- version/autodesk advanced material exchange/2019
- version/autodesk advanced material exchange/2021
- canonical/autodesk moldflow adviser
- version/autodesk moldflow adviser/2019
- version/autodesk moldflow adviser/2021
- canonical/autodesk moldflow communicator
- version/autodesk moldflow communicator/2019
- version/autodesk moldflow communicator/2021
- canonical/autodesk moldflow synergy
- version/autodesk moldflow synergy/2019
- version/autodesk moldflow synergy/2021