CVE-2023-29068: High severity autodesk vulnerability

Q: What is the severity of CVE-2023-29068?

CVE-2023-29068 is considered a high severity vulnerability due to potential code execution risks.

Q: How do I fix CVE-2023-29068?

To fix CVE-2023-29068, users should update their affected Autodesk software to the latest available version.

Q: Which Autodesk products are affected by CVE-2023-29068?

CVE-2023-29068 affects multiple Autodesk products including Alias, AutoCAD, Revit, and others listed in the advisory.

Q: What can happen if CVE-2023-29068 is exploited?

Exploitation of CVE-2023-29068 could lead to memory corruption and unauthorized code execution within the vulnerable application.

Q: Is there a patch available for CVE-2023-29068?

Yes, Autodesk has released patches for CVE-2023-29068 which can be applied through the software’s update feature.

Published Jun 27, 2023

Updated

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected Software

53 affected components

Autodesk Alias>=2023<2023.1.1

Autodesk AutoCAD>=2020<2020.1.6

Autodesk AutoCAD>=2021<2021.1.3

Autodesk AutoCAD>=2022<2022.1.3

Autodesk AutoCAD>=2023<2023.1.1

Autodesk Autocad Advance Steel>=2020<2020.1.6

Autodesk Autocad Advance Steel>=2021<2021.1.3

Autodesk Autocad Advance Steel>=2022<2022.1.3

Autodesk Autocad Advance Steel>=2023<2023.1.1

Autodesk AutoCAD Architecture>=2020<2020.1.6

Autodesk AutoCAD Architecture>=2021<2021.1.3

Autodesk AutoCAD Architecture>=2022<2022.1.3

Autodesk AutoCAD Architecture>=2023<2023.1.1

Autodesk Autocad Civil 3d>=2020<2020.1.6

Autodesk Autocad Civil 3d>=2021<2021.1.3

Autodesk Autocad Civil 3d>=2022<2022.1.3

Autodesk Autocad Civil 3d>=2023<2023.1.1

Autodesk AutoCAD Electrical>=2020<2020.1.6

Autodesk AutoCAD Electrical>=2021<2021.1.3

Autodesk AutoCAD Electrical>=2022<2022.1.3

Autodesk AutoCAD Electrical>=2023<2023.1.1

Autodesk AutoCAD LT>=2020<2020.1.6

Autodesk AutoCAD LT>=2021<2021.1.3

Autodesk AutoCAD LT>=2022<2022.1.3

Autodesk AutoCAD LT>=2023<2023.1.1

Autodesk AutoCAD Map 3D>=2020<2020.1.6

Autodesk AutoCAD Map 3D>=2021<2021.1.3

Autodesk AutoCAD Map 3D>=2022<2022.1.3

Autodesk AutoCAD Map 3D>=2023<2023.1.1

Autodesk AutoCAD Mechanical>=2020<2020.1.6

Autodesk AutoCAD Mechanical>=2021<2021.1.3

Autodesk AutoCAD Mechanical>=2022<2022.1.3

Autodesk AutoCAD Mechanical>=2023<2023.1.1

Autodesk AutoCAD MEP>=2020<2020.1.6

Autodesk AutoCAD MEP>=2021<2021.1.3

Autodesk AutoCAD MEP>=2022<2022.1.3

Autodesk AutoCAD MEP>=2023<2023.1.1

Autodesk AutoCAD Plant 3D>=2020<2020.1.6

Autodesk AutoCAD Plant 3D>=2021<2021.1.3

Autodesk AutoCAD Plant 3D>=2022<2022.1.3

Autodesk AutoCAD Plant 3D>=2023<2023.1.1

Autodesk InfraWorks>=2021<2021.2

Autodesk InfraWorks>=2022<2022.1

Autodesk InfraWorks>=2023<2023.1

Autodesk Inventor>=2021<2021.5

Autodesk Inventor>=2022<2022.4

Autodesk Inventor>=2023<2023.3.1

Autodesk Maya Usd>=2022<2022.5

Autodesk Maya Usd>=2023<2023.3

Autodesk Navisworks>=2022<2022.4

Autodesk Navisworks>=2023<2023.2

Autodesk Revit>=2021<2021.1.8

Autodesk VRED>=2023<2023.4

Event History

Jun 27, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2023-29068?

CVE-2023-29068 is considered a high severity vulnerability due to potential code execution risks.

How do I fix CVE-2023-29068?

To fix CVE-2023-29068, users should update their affected Autodesk software to the latest available version.

Which Autodesk products are affected by CVE-2023-29068?

CVE-2023-29068 affects multiple Autodesk products including Alias, AutoCAD, Revit, and others listed in the advisory.

What can happen if CVE-2023-29068 is exploited?

Exploitation of CVE-2023-29068 could lead to memory corruption and unauthorized code execution within the vulnerable application.

Is there a patch available for CVE-2023-29068?