Intrusion PreventionAutodesk.FBX.Review.ZIP.Directory.Traversal
Description
This indicates an attack attempt to exploit a Directory Traversal Vulnerability in Autodesk FBX Review.
The vulnerability is due to a lack of proper input validation of names of files included in ZIP files opened by the program. A remote attacker can exploit this vulnerability by enticing a target user to open a crafted ZIP file in FBX Review. Successful exploitation could result in the execution of arbitrary code under the security context of the target user.
Affected Products
Autodesk FBX Review prior to 1.5.2
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 50876 |
| Created | Oct 28, 2021 |
| Updated | Mar 31, 2022 |
| Risk |
|
| CVE ID | CVE-2021-27030 |
| Exploit Prediction Score | 93.17% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |