CVE-2021-40155
High
Published: 15 September 2021
Published
15 September 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.0042
62.3th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-40155 is a high-severity Out-of-bounds Read (CWE-125) vulnerability in Autodesk Navisworks. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 37.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-27340
Vulnerability details
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
autodesk
navisworks
2019, 2020, 2021, 2022
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.