CVE-2022-27873

HIGH 7.8CVE-2022-27873 · Published 29/07/2022 · updated 17/06/2026

In short

CVE-2022-27873 is a HIGH (CVSS 7.8) vulnerability affecting fusion 360 (autodesk).
Chance of exploitation in the next 30 days (EPSS): 0.21%, higher than 10.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fusion 360 autodesk	`≤ 2.0.12887`	No fix yet

Description

An attacker can force the victim’s device to perform arbitrary HTTP requests in WAN through a malicious SVG file being parsed by Autodesk Fusion 360’s document parser. The vulnerability exists in the application’s ‘Insert SVG’ procedure. An attacker can also leverage this vulnerability to obtain victim’s public IP and possibly other sensitive information.

References

autodesk.com/trust/security-advisories/adsk-sa-2022-0013 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free