CVE-2024-23158
📋 TL;DR
This vulnerability allows attackers to execute arbitrary code or cause crashes by tricking users into opening malicious IGES files in affected Autodesk applications. It affects users of Autodesk products that use the vulnerable ASMImport229A.dll component. Successful exploitation requires user interaction to open a crafted file.
💻 Affected Systems
- Autodesk applications using ASMImport229A.dll for IGES file import
📦 What is this software?
Advance Steel by Autodesk
Advance Steel by Autodesk
Advance Steel by Autodesk
Advance Steel by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
⚠️ Risk & Real-World Impact
Worst Case
Remote code execution with the privileges of the current user, potentially leading to full system compromise, data theft, or ransomware deployment.
Likely Case
Application crashes and denial of service when users open malicious IGES files from untrusted sources.
If Mitigated
Limited impact with proper user training, file restrictions, and security controls preventing execution of malicious code.
🎯 Exploit Status
Exploitation requires user interaction to open malicious IGES files. The use-after-free vulnerability requires specific memory manipulation techniques.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Check Autodesk security advisory ADSK-SA-2024-0010 for specific patched versions
Vendor Advisory: https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0010
Restart Required: Yes
Instructions:
1. Visit the Autodesk security advisory page
2. Identify affected products and versions
3. Download and install the latest updates from Autodesk
4. Restart affected applications and systems
🔧 Temporary Workarounds
Restrict IGES file handling
allBlock or restrict IGES files from untrusted sources using application controls or group policies
Disable IGES import functionality
windowsRemove or disable the ASMImport229A.dll component if IGES import is not required
🧯 If You Can't Patch
- Implement application whitelisting to prevent execution of malicious code
- Educate users to never open IGES files from untrusted sources
🔍 How to Verify
Check if Vulnerable:
Check if ASMImport229A.dll exists in Autodesk application directories and verify version against patched releasesCheck Version:
Check Autodesk application 'About' dialog or use vendor-specific version checking toolsVerify Fix Applied:
Verify application version matches or exceeds patched version listed in Autodesk advisory📡 Detection & Monitoring
Log Indicators:
- Application crashes related to ASMImport229A.dll
- Unexpected process terminations when opening IGES files
Network Indicators:
- Downloads of IGES files from suspicious sources
- Unusual outbound connections after IGES file processing
SIEM Query:
Process creation events for Autodesk applications followed by crash events or suspicious network activity