Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2024-3301

Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
3DS

Description

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dassault Systèmes DELMIA Apriso

Default version status: unaffected

  • Release 2019 Golden to ≤ Release 2019 SP5affected
  • Release 2020 Golden to ≤ Release 2020 SP4affected
  • Release 2021 Golden to ≤ Release 2021 SP3affected
  • Release 2022 Golden to ≤ Release 2022 SP3affected
  • Release 2023 Golden to ≤ Release 2023 SP2affected
  • Release 2024 Golden to ≤ Release 2024 SP1affected

References