BOSCH-SA-246962-BT: BVMS was using Autodesk Design Review for showing 2D/3D files. Autodesk has published multiple vulnerabilities which when successfully exploited could lead to the execution of arbitrary code.Starting from BVMS version 11.0, the Autodesk Design Review is not used anymore in BVMS, but the BVMS setup does not uninstall the Autodesk Design Review during a BVMS upgrade. This means only BVMS systems are affected which have versions \<= 10.1.1.12 or were upgraded from BVMS Version \<= 10.1.1.12 to a higher version.-   Bosch does not provide any patches for BVMS \<= 10.1.1.12-   For BVMS systems upgraded from any BVMS version \<= 10.1.1.12 Bosch advises to mitigate the vulnerability.-   Fresh BVMS installations starting from BVMS 11.0 are not affectedBefore removing Autodesk Design Review v 9.1.0.127 make sure that it is not used by any other software installed on that machine.How to check if the system is affected:1.  In the Search bar, search for \"add remove\" and select \"Add remove programs\".2.  Check whether Autodesk Design Review v 9.1.0.127 is installed.


https://psirt.bosch.com/security-advisories/bosch-sa-246962-bt.html