PT-2022-21885 · Autodesk · Moldflow Synergy+2

Published 2022-10-03 · Updated 2022-10-04 · CVE-2022-33883

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moldflow Synergy (affected versions not specified) Moldflow Adviser (affected versions not specified) Moldflow Communicator (affected versions not specified) Advanced Material Exchange (affected versions not specified)

Description A maliciously crafted file consumed through certain applications could lead to memory corruption, potentially allowing code execution in the context of the current process when combined with other vulnerabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-33883

Affected Products

Moldflow Adviser

Moldflow Communicator

Moldflow Synergy

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-33883 · Security Note
• https://osv.dev/vulnerability/CVE-2022-33883 · Vendor Advisory
• https://autodesk.com/trust/security-advisories/adsk-sa-2022-0019 · Vendor Advisory