Description
Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server.
References
- VU#402020 third-party-advisory
Unscored
CVE-2014-2967
EUVD-2014-2989GHSA-g94v-8mrm-p53c
Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API …
Published Jul 7, 2014 · Updated Aug 6, 2024 · Assigned by certcc