Detections
Analytics
Autodesk < 2026.1 Multiple Vulnerabilities (AutoCAD) (adsk-sa-2025-0017)
high Nessus Plugin ID 252961
Synopsis
The version of Autodesk AutoCAD installed on the remote Windows host is affected by multiple vulnerabilities.Description
The 2025 version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2026.1. It is, therefore, affected by multiple vulnerabilities:- A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. (CVE-2025-5046)
- A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. (CVE-2025-5047)
- A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. (CVE-2025-5048)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Autodesk AutoCAD versions 2025.1.2 or later.See Also
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0017
Plugin Details
Severity: High
ID: 252961
File Name: autodesk_autocad_adsk-sa-2025-0017.nasl
Version: 1.1
Type: local
Agent: windows
Family: Windows
Published: 8/20/2025
Updated: 8/20/2025
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.2
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2025-5046
CVSS v3
Risk Factor: High
Base Score: 7.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: cpe:/a:autodesk:autocad
Required KB Items: installed_sw/Autodesk AutoCAD
Patch Publication Date: 8/15/2025
Vulnerability Publication Date: 8/15/2025