CVE-2024-3301

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.

Score

CVSS 3.1 8.5 High

Status

Deferred - 3DS.Information-Security@3ds.com

Published

2024-05-30

Last modified

2024-09-03

Weaknesses

CWE-502

Affected products

• Delmia Apriso (3ds)
• Delmia Apriso (Dassault Systmes)

References

• https://www.3ds.com/vulnerability/advisories