Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2022-27873
CVE-2022-27873:
Autodesk Fusion 360 vulnerability analysis and mitigation
Overview
CVE-2022-27873 is a vulnerability discovered in Autodesk Fusion 360's document parser, specifically in the 'Insert SVG' procedure. The vulnerability was disclosed on July 29, 2022, affecting versions 2.0.12887 and earlier of Autodesk Fusion 360 (Autodesk Advisory).
Technical details
The vulnerability exists in the application's 'Insert SVG' procedure where an attacker can manipulate the document parser through a malicious SVG file. The issue was classified as a Medium severity vulnerability according to Autodesk's severity rating system, which indicates that exploitation is mitigated by factors such as difficulty to exploit, default configuration, or ease of identification (Autodesk Advisory).
Impact
When exploited, the vulnerability allows attackers to force the victim's device to perform arbitrary HTTP requests in WAN. Additionally, attackers can leverage this vulnerability to obtain the victim's public IP address and potentially access other sensitive information (Autodesk Advisory).
Mitigation and workarounds
Autodesk has addressed this vulnerability in version 2.0.12888 and later releases. Users are strongly recommended to update to the latest version through either the in-product update system or by downloading from Autodesk Account Management (Autodesk Advisory).
Additional resources
Source: This report was generated using AI
Related Autodesk Fusion 360 vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management