CVE-2024-11454CWE-426

Untrusted Search Path vulnerability in Autodesk Revit

High · published December 9, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2024-12-09T17:48Z
EPSS history
Timeline
  • 09 DEC 17:48Z
    Untrusted Search Path vulnerability in Autodesk Revit
    cvelistv5