VULNERABILITY INTELLIGENCE

CVE-2014-2967

CVSS score10 HIGH
EPSS probability5.07%
CISA KEVNot currently listed
Published2014-07-07
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server.

Weakness classification

  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Primary references