PT-2014-4989 · Autodesk · Autodesk Vred Professional

Thomas Fischer · Publicado 2014-07-07 · Atualizado 2014-07-07 · CVE-2014-2967

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Autodesk VRED Professional 2014 versions before SR1 SP8

Description The issue allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server.

Recommendations For Autodesk VRED Professional 2014 versions before SR1 SP8, update to SR1 SP8 or later to resolve the issue.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2014-2967

Produtos afetados

Autodesk Vred Professional

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-2967 · Nota de Segurança
• http://kb.cert.org/vuls/id/402020 · Nota