CVE-2022-32235
Last modified
CVE-2022-32235 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. When a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
When a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | 3d Visual Enterprise Viewer | <= 9.0 |
References
- https://launchpad.support.sap.com/#/notes/3206271Permissions Required, Vendor Advisory
- https://launchpad.support.sap.com/#/notes/3206271Permissions Required, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-32235?
How severe is CVE-2022-32235?
How do I fix CVE-2022-32235?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-3223Cross-site Scripting (XSS) - Stored in GitHub repository jgr…6.1
- CVE-2022-32230Microsoft Windows SMBv3 suffers from a null pointer derefere…7.5
- CVE-2022-32231Improper initialization in the BIOS firmware for some Intel(…6.7
- CVE-2022-32232Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2022-32233Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2022-32234An out of bounds write in hermes, while handling large array…9.8
- CVE-2022-32236When a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) …5.5
- CVE-2022-32237When a user opens manipulated Computer Graphics Metafile (.c…5.5
- CVE-2022-32238When a user opens manipulated Encapsulated Post Script (.eps…5.5
- CVE-2022-32239When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) fil…5.5
- CVE-2022-3224Misinterpretation of Input in GitHub repository ionicabizau/…6.1
- CVE-2022-32240When a user opens manipulated Jupiter Tesselation (.jt, JTRe…5.5
Are you affected by CVE-2022-32235?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
