CVE-2025-1650
📋 TL;DR
This vulnerability allows attackers to exploit an uninitialized variable in Autodesk AutoCAD when processing malicious CATPRODUCT files. Successful exploitation could lead to crashes, sensitive data disclosure, or arbitrary code execution. All AutoCAD users who open untrusted CATPRODUCT files are affected.
💻 Affected Systems
- Autodesk AutoCAD
- Autodesk AutoCAD LT
📦 What is this software?
Advance Steel by Autodesk
Advance Steel by Autodesk
Advance Steel by Autodesk
Advance Steel by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
⚠️ Risk & Real-World Impact
Worst Case
Remote code execution with the same privileges as the AutoCAD process, potentially leading to full system compromise.
Likely Case
Application crash or denial of service, with potential for limited data leakage.
If Mitigated
No impact if proper file handling controls and patching are implemented.
🎯 Exploit Status
Exploitation requires user interaction to open a malicious file; no public exploit code is currently available.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Latest AutoCAD 2022 updates (specific version in vendor advisory)
Vendor Advisory: https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001
Restart Required: No
Instructions:
1. Open AutoCAD. 2. Navigate to Help > Check for Updates. 3. Install all available updates. 4. Verify installation by checking version.
🔧 Temporary Workarounds
Restrict CATPRODUCT file handling
allBlock or restrict opening of CATPRODUCT files from untrusted sources.
🧯 If You Can't Patch
- Implement application whitelisting to prevent execution of malicious files.
- Educate users to avoid opening CATPRODUCT files from unknown or untrusted sources.
🔍 How to Verify
Check if Vulnerable:
Check AutoCAD version against affected versions listed in vendor advisory.Check Version:
In AutoCAD, type ABOUT or check Help > About AutoCAD.Verify Fix Applied:
Verify AutoCAD version is updated to latest patch version.📡 Detection & Monitoring
Log Indicators:
- Application crashes when opening CATPRODUCT files
- Unusual file access patterns
Network Indicators:
- Downloads of CATPRODUCT files from untrusted sources
SIEM Query:
EventID=1000 OR EventID=1001 AND ProcessName='acad.exe' AND FileExtension='.CATPRODUCT'