CVE-2023-25003: High severity autodesk vulnerability
Published Jun 23, 2023
·Updated
A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.
Affected Software
53 affected components
Autodesk Alias>=2023<2023.1.1
Autodesk AutoCAD>=2020<2020.1.6
Autodesk AutoCAD>=2021<2021.1.3
Autodesk AutoCAD>=2022<2022.1.3
Autodesk AutoCAD>=2023<2023.1.1
Autodesk Autocad Advance Steel>=2020<2020.1.6
Autodesk Autocad Advance Steel>=2021<2021.1.3
Autodesk Autocad Advance Steel>=2022<2022.1.3
Autodesk Autocad Advance Steel>=2023<2023.1.1
Autodesk AutoCAD Architecture>=2020<2020.1.6
Autodesk AutoCAD Architecture>=2021<2021.1.3
Autodesk AutoCAD Architecture>=2022<2022.1.3
Autodesk AutoCAD Architecture>=2023<2023.1.1
Autodesk Autocad Civil 3d>=2020<2020.1.6
Autodesk Autocad Civil 3d>=2021<2021.1.3
Autodesk Autocad Civil 3d>=2022<2022.1.3
Autodesk Autocad Civil 3d>=2023<2023.1.1
Autodesk AutoCAD Electrical>=2020<2020.1.6
Autodesk AutoCAD Electrical>=2021<2021.1.3
Autodesk AutoCAD Electrical>=2022<2022.1.3
Autodesk AutoCAD Electrical>=2023<2023.1.1
Autodesk AutoCAD LT>=2020<2020.1.6
Autodesk AutoCAD LT>=2021<2021.1.3
Autodesk AutoCAD LT>=2022<2022.1.3
Autodesk AutoCAD LT>=2023<2023.1.1
Autodesk AutoCAD Map 3D>=2020<2020.1.6
Autodesk AutoCAD Map 3D>=2021<2021.1.3
Autodesk AutoCAD Map 3D>=2022<2022.1.3
Autodesk AutoCAD Map 3D>=2023<2023.1.1
Autodesk AutoCAD Mechanical>=2020<2020.1.6
Autodesk AutoCAD Mechanical>=2021<2021.1.3
Autodesk AutoCAD Mechanical>=2022<2022.1.3
Autodesk AutoCAD Mechanical>=2023<2023.1.1
Autodesk AutoCAD MEP>=2020<2020.1.6
Autodesk AutoCAD MEP>=2021<2021.1.3
Autodesk AutoCAD MEP>=2022<2022.1.3
Autodesk AutoCAD MEP>=2023<2023.1.1
Autodesk AutoCAD Plant 3D>=2020<2020.1.6
Autodesk AutoCAD Plant 3D>=2021<2021.1.3
Autodesk AutoCAD Plant 3D>=2022<2022.1.3
Autodesk AutoCAD Plant 3D>=2023<2023.1.1
Autodesk InfraWorks>=2021<2021.2
Autodesk InfraWorks>=2022<2022.1
Autodesk InfraWorks>=2023<2023.1
Autodesk Inventor>=2021<2021.5
Autodesk Inventor>=2022<2022.4
Autodesk Inventor>=2023<2023.3.1
Autodesk Maya Usd>=2022<2022.5
Autodesk Maya Usd>=2023<2023.3
Autodesk Navisworks>=2022<2022.4
Autodesk Navisworks>=2023<2023.2
Autodesk Revit>=2021<2021.1.8
Autodesk VRED>=2023<2023.4
Event History
Jun 23, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-25003?
CVE-2023-25003 is classified as critical due to its potential for code execution.
2
How do I fix CVE-2023-25003?
To fix CVE-2023-25003, update Autodesk AutoCAD and Maya to the latest versions available.
3
Which software is affected by CVE-2023-25003?
CVE-2023-25003 affects Autodesk AutoCAD 2023, Maya 2022, and several other Autodesk products.
4
Can CVE-2023-25003 lead to data compromise?
Yes, exploitation of CVE-2023-25003 may lead to unauthorized access and potential data compromise.
5
What are the symptoms of exploitation of CVE-2023-25003?
Exploitation of CVE-2023-25003 may result in unexpected application behavior or crashes.