CVE-2014-2072

CRITICAL

Dassault Systemes Catia V5-6R2013 - Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-2072. PoCs published by Mohamed Shetta.

AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Catia V5-6R2013 by sending maliciously crafted packets to a network service. It attempts to execute arbitrary code via a controlled return address and a shellcode payload.

Description

Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mohamed Shetta · pythonremotemultiple

https://www.exploit-db.com/exploits/39104

View Code ZIP pw:eip

This exploit targets a stack-based buffer overflow in Catia V5-6R2013 by sending maliciously crafted packets to a network service. It attempts to execute arbitrary code via a controlled return address and a shellcode payload.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Catia V5-6R2013

No auth needed

Prerequisites: Network access to the target service on port 55555 or 55558

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry x_refsource_misc

http://www.securityfocus.com/bid/65675

Exploit, Third Party Advisory exploit x_refsource_exploit-db

https://www.exploit-database.net/?id=60103

Exploit, Third Party Advisory, VDB Entry x_refsource_misc

http://packetstormsecurity.com/files/125308/Catia-V5-6R2013-Stack-Buffer-Overflow.html

Scores

CVSS v3 9.8

EPSS 0.2840

EPSS Percentile 96.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

3ds/catia v5-6r2013

Published Jan 08, 2020

Tracked Since Feb 18, 2026