← CVE Intelligence

CVE-2024-3301

Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 PUBLISHED

Description (CNA)

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / DELMIA Aprisoaffected Release 2019 Golden through Release 2019 SP5; affected Release 2020 Golden through Release 2020 SP4; affected Release 2021 Golden through Release 2021 SP3; affected Release 2022 Golden through Release 2022 SP3; affected Release 2023 Golden through Release 2023 SP2; affected Release 2024 Golden through Release 2024 SP1

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.