← CVE Intelligence

CVE-2023-1997

OS Command Injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x PUBLISHED

Description (CNA)

An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / SIMULIA 3DOrchestrateaffected Release 3DEXPERIENCE R2021x Golden through Release 3DEXPERIENCE R2021x.FP.CFA.2306; affected Release 3DEXPERIENCE R2022x Golden through Release 3DEXPERIENCE R2022x FP.CFA.2310; affected Release 3DEXPERIENCE R2023x Golden through Release 3DEXPERIENCE R2023x.FP.CFA.2314

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.