PT-2023-18182 · Dassault Systèmes · Delmia Apriso
CVE-2023-2141
·
Published
2023-04-21
·
Updated
2023-06-07
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
DELMIA Apriso versions 2017 through 2022
Description
An unsafe .NET object deserialization could lead to post-authentication remote code execution.
Recommendations
For DELMIA Apriso versions 2017 through 2022, update to a version that fixes the unsafe .NET object deserialization issue to prevent post-authentication remote code execution.
As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.
Fix
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Delmia Apriso