CVE-2024-11454: Untrusted Search Path vulnerability in Autodesk Revit
Published Dec 9, 2024
·Updated
A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.
Affected Software
2 affected components
Autodesk Revit
Autodesk Revit>=2025<2025.4
Event History
Dec 9, 2024
CVE Published
via MITRE·05:48 PM
Data Sourced
via MITRE·05:48 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-11454?
CVE-2024-11454 is rated as critical due to its potential for executing arbitrary code.
2
How do I fix CVE-2024-11454?
To mitigate CVE-2024-11454, ensure that no untrusted DLL files are placed in the same directory as RVT files.
3
Which software is affected by CVE-2024-11454?
CVE-2024-11454 affects Autodesk Revit and its associated applications.
4
What type of attack does CVE-2024-11454 enable?
CVE-2024-11454 enables code execution attacks via maliciously crafted DLL files.
5
What conditions lead to the vulnerability in CVE-2024-11454?
CVE-2024-11454 arises when untrusted search paths are utilized in the loading of DLL files by Autodesk Revit.