PT-2024-14875

CVE-2023-6078

·

Published

2024-02-01

·

Updated

2024-02-09

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023
Description An OS Command Injection issue exists, allowing arbitrary command execution through the upload of a specially crafted perl script.
Recommendations For Release BIOVIA 2021 through Release BIOVIA 2023, consider restricting the upload of perl scripts to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')
Related identifiers
CVE-2023-6078
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com