← CVE Intelligence

CVE-2024-3300

Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 PUBLISHED

Description (CNA)

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / DELMIA Aprisoaffected Release 2019 Golden through Release 2019 SP5; affected Release 2020 Golden through Release 2020 SP4; affected Release 2021 Golden through Release 2021 SP3; affected Release 2022 Golden through Release 2022 SP3; affected Release 2023 Golden through Release 2023 SP2; affected Release 2024 Golden through Release 2024 SP1

CWE

CWE-502

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.