CVE-2021-27032: autodesk licensing services

csirt@kutim:~/threat-intel/cve/CVE-2021-27032

CVSS 7.8 · High EPSS 0,24%

Kerentanan Incorrect Default Permissions pada autodesk licensing services. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service.

Rincian

Terbit di NVD: 28 Mei 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-276: Incorrect Default Permissions
EPSS (30 hari): 0,24% peluang dieksploitasi; lebih tinggi dari 13,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
autodesk	licensing services	Versi 9.0.1.1462.100

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://knowledge.autodesk.com/search-result/caas/downloads/content/autodesk-licensing-service-download.html product · advisory vendor
https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0002 advisory vendor
https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0002%3B

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.