HIGH
Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024
Published May 30, 2024
8.5
HIGHCVSS 3.1
EPSS 0.67%
Description
An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.
Affected products
-
- Version Release 2019 GoldenStatusaffectedConstraints<=Release 2019 SP5
- Version Release 2020 GoldenStatusaffectedConstraints<=Release 2020 SP4
- Version Release 2021 GoldenStatusaffectedConstraints<=Release 2021 SP3
- Version Release 2022 GoldenStatusaffectedConstraints<=Release 2022 SP3
- Version Release 2023 GoldenStatusaffectedConstraints<=Release 2023 SP2
- Version Release 2024 GoldenStatusaffectedConstraints<=Release 2024 SP1
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Dassault Systèmes | DELMIA Apriso | unaffected |
|
No data.
-
- Version 2019StatusaffectedConstraints<=2024
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| 3ds | Delmia Apriso | unaffected |
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner 3DS
Published May 30, 2024
Updated Sep 3, 2024
Reserved Apr 4, 2024
Link CVE-2024-3301
CISA Vulnrichment
Updated Sep 3, 2024
ENISA EUVD
EUVD-2024-31891 Assigner 3DS
Published May 30, 2024
Updated Sep 3, 2024
Exploited since n/a
Link EUVD-2024-31891