CVE-2021-40155
📋 TL;DR
This vulnerability allows arbitrary code execution through maliciously crafted DWG files in Autodesk Navisworks. Attackers can exploit an out-of-bounds read vulnerability to potentially take control of affected systems. Users of Autodesk Navisworks 2019-2022 who open untrusted DWG files are at risk.
💻 Affected Systems
- Autodesk Navisworks
📦 What is this software?
Navisworks by Autodesk
Navisworks by Autodesk
Navisworks by Autodesk
Navisworks by Autodesk
⚠️ Risk & Real-World Impact
Worst Case
Complete system compromise with attacker gaining full control over the affected workstation, potentially leading to lateral movement within the network.
Likely Case
Local privilege escalation or remote code execution when users open malicious DWG files, resulting in data theft or malware installation.
If Mitigated
Limited impact with proper file validation and user awareness, potentially causing application crashes but no code execution.
🎯 Exploit Status
Exploitation requires user interaction to open malicious DWG file. No public exploit code available as per references.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Patches available through Autodesk Desktop App or manual download
Vendor Advisory: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009
Restart Required: Yes
Instructions:
1. Open Autodesk Desktop App 2. Check for updates 3. Install available security updates for Navisworks 4. Restart computer if prompted
🔧 Temporary Workarounds
Restrict DWG file handling
windowsConfigure system to open DWG files with alternative software or in protected viewer mode
User awareness training
allEducate users to only open DWG files from trusted sources
🧯 If You Can't Patch
- Implement application whitelisting to prevent unauthorized execution
- Use network segmentation to isolate Navisworks workstations
🔍 How to Verify
Check if Vulnerable:
Check Navisworks version in Help > About. If version is 2019-2022 without latest patches, system is vulnerable.Check Version:
In Navisworks: Help > About or check registry: HKEY_LOCAL_MACHINE\SOFTWARE\Autodesk\NavisworksVerify Fix Applied:
Verify version has been updated through Autodesk Desktop App or check patch installation in Windows Programs and Features.📡 Detection & Monitoring
Log Indicators:
- Application crashes when opening DWG files
- Unusual process creation from Navisworks
Network Indicators:
- Outbound connections from Navisworks to unusual destinations
SIEM Query:
EventID=1000 Source=Navisworks.exe OR ProcessCreation ParentImage=*Navisworks.exe