Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-6078

OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
3DS

Description

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dassault Systèmes BIOVIA Materials Studio products

Default version status: unaffected

  • BIOVIA 2021 Goldenaffected
  • BIOVIA 2022 Goldenaffected
  • BIOVIA 2023 Goldenaffected

References