VULNERABILITY INTELLIGENCE

CVE-2014-0818

CVSS score7.5 HIGH
EPSS probability2.49%
CISA KEVNot currently listed
Published2014-02-22
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references