← CVE Intelligence

CVE-2023-2141

Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022 PUBLISHED

Description (CNA)

An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / DELMIA Aprisoaffected Apriso 2017 Golden through Apriso 2017 SP7; affected Apriso 2018 Golden through Apriso 2018 SP4; affected Apriso 2019 Golden through Apriso 2019 SP5; affected Apriso 2020 Golden through Apriso 2020 SP4; affected Apriso 2021 Golden through Apriso 2021 SP2; affected Apriso 2022 Golden

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.