CVE-2024-9500 describes an insecure privilege management vulnerability in the Autodesk Installer. A maliciously crafted DLL placed in temporary folders can lead to local privilege escalation to NT AUTHORITY/SYSTEM. With a CVSS score of 7.8 (High), this vulnerability requires user interaction (UI:R) and local access (AV:L), but has low attack complexity (AC:L), potentially allowing an attacker to gain full control of the system (C:H, I:H, A:H). Currently, there is no public exploit code available, it is not listed in CISA's KEV catalog, and there is no community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.10.0.20CPE matchmatch criteria | cpe:2.3:a:autodesk:installer:*:*:*:*:*:*:*:* | ||
>= 2.10.0.17, < 2.10.0.20CPE match | cpe:2.3:a:autodesk:installer:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.