Lucene search

3DSCVE-2024-6377

HistoryAug 20, 2024 - 2:15 p.m.

CVE-2024-6377

2024-08-2014:15:09

CWE-601

3DS

web.nvd.nist.gov

3dswymer

xss

vulnerability

r2022x

r2024x

attacker

execute

arbitrary

script code

browser session

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrary website via a crafted URL.

Affected configurations

Nvd

Node

3ds3dexperienceRanger2022x–r2024x

VendorProductVersionCPE
3ds3dexperience*cpe:2.3:o:3ds:3dexperience:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
3ds	3dexperience	*	cpe:2.3:o:3ds:3dexperience::::::::

CNA Affected

[
  {
    "vendor": "Dassault Systèmes",
    "product": "3DSwymer",
    "versions": [
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2022x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2022x.FP.CFA.2424",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2023x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2023x.FP.CFA.2419",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2024x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2024x.FP.CFA.2424",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.3ds.com/vulnerability/advisories

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2024-6377