CVE-2019-7361 Explained : Impact and Mitigation

A perpetrator can trick a target into opening a harmful action micro (.actm) file containing serialized data. This could potentially initiate the execution of code in various Autodesk software versions such as Advance Steel 2018, AutoCAD 2018, AutoCAD Architecture 2018, AutoCAD Electrical 2018, AutoCAD Map 3D 2018, AutoCAD Mechanical 2018, AutoCAD MEP 2018, AutoCAD P&ID 2018, AutoCAD Plant 3D 2018, AutoCAD LT 2018, and Civil 3D 2018.

Understanding CVE-2019-7361

This CVE involves a vulnerability related to deserialization of untrusted data in multiple Autodesk software products.

What is CVE-2019-7361?

CVE-2019-7361 is a security vulnerability that allows an attacker to execute arbitrary code by convincing a user to open a malicious .actm file in various Autodesk software versions.

The Impact of CVE-2019-7361

The exploitation of this vulnerability could lead to unauthorized execution of code, potentially compromising the security and integrity of affected systems.

Technical Details of CVE-2019-7361

This section provides more in-depth technical information about the CVE.

Vulnerability Description

The vulnerability involves the deserialization of untrusted data in Autodesk software, enabling attackers to execute malicious code.

Affected Systems and Versions

The following Autodesk software versions are affected by CVE-2019-7361:

Autodesk Civil 3D 2018
Autodesk Advance Steel 2018
Autodesk AutoCAD 2018
Autodesk AutoCAD Architecture 2018
Autodesk AutoCAD Electrical 2018
Autodesk AutoCAD Map 3D 2018
Autodesk AutoCAD Mechanical 2018
Autodesk AutoCAD MEP 2018
Autodesk AutoCAD P&ID 2018
Autodesk AutoCAD Plant 3D 2018
Autodesk AutoCAD LT 2018

Exploitation Mechanism

The vulnerability can be exploited by tricking a user into opening a specially crafted .actm file containing serialized data, leading to code execution.

Mitigation and Prevention

Protecting systems from CVE-2019-7361 requires immediate actions and long-term security practices.

Immediate Steps to Take

Avoid opening .actm files from untrusted or unknown sources.
Apply security updates and patches provided by Autodesk promptly.

Long-Term Security Practices

Educate users about the risks of opening files from unfamiliar sources.
Implement robust security measures to prevent unauthorized code execution.

Patching and Updates

Regularly check for security advisories and updates from Autodesk to patch the vulnerability and enhance system security.