CVE-2025-9976 — OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R…

Description (CNA)

An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an attacker to execute arbitrary code on the user's machine.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / Station Launcher App in 3DEXPERIENCE platform	affected Release 3DEXPERIENCE R2022x Golden through Release 3DEXPERIENCE R2022x.FP.CFA.2540; affected Release 3DEXPERIENCE R2023x Golden through Release 3DEXPERIENCE R2023x.FP.CFA.2532; affected Release 3DEXPERIENCE R2024x Golden through Release 3DEXPERIENCE R2024x.FP.CFA.2537; affected Release 3DEXPERIENCE R2025x Golden through Release 3DEXPERIENCE R2025x.FP.CFA.2532

CWE

CWE-78

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-9976

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.