3ds.com
https://www.3ds.com/vulnerability/advisories CVE-2024-3301
HIGH
Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024
Record summary
CVE-2024-3301 has a selected CVSS score of 8.5 (high).
Description
An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 3, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
delmia_aprisoBrowse 3ds / delmia_aprisoDefault status: unaffected | CVE List | 2019 to ≤ 2024 | affected |
DELMIA AprisoBrowse Dassault Systèmes / DELMIA AprisoDefault status: unaffected | CVE List | Release 2019 Golden to ≤ Release 2019 SP5 | affected |
| Release 2020 Golden to ≤ Release 2020 SP4 | affected | ||
| Release 2021 Golden to ≤ Release 2021 SP3 | affected | ||
| Release 2022 Golden to ≤ Release 2022 SP3 | affected | ||
| Release 2023 Golden to ≤ Release 2023 SP2 | affected | ||
| Release 2024 Golden to ≤ Release 2024 SP1 | affected |