Vulnerability · Published May 28, 2021 · Assigned by autodesk
CVE-2021-27032
High 7.8
In plain English
A high-severity security flaw in Autodesk Licensing Installer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.2%top 85.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Autodesk Licensing Installer | 9.0.1.1462.100 |