Lucene search

3DSCVELIST:CVE-2023-2141

HistoryApr 21, 2023 - 3:48 p.m.

CVE-2023-2141 Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022

2023-04-2115:48:39

CWE-502

3DS

www.cve.org

cve-2023-2141

delmia apriso

2017-2022

remote code execution

post-authentication

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution.

CNA Affected

[
  {
    "vendor": "Dassault Systèmes",
    "product": "DELMIA Apriso",
    "versions": [
      {
        "status": "affected",
        "version": "Apriso 2017 Golden",
        "lessThanOrEqual": "Apriso 2017 SP7",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Apriso 2018 Golden",
        "lessThanOrEqual": "Apriso 2018 SP4",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Apriso 2019 Golden",
        "lessThanOrEqual": "Apriso 2019 SP5",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Apriso 2020 Golden",
        "lessThanOrEqual": "Apriso 2020 SP4",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Apriso 2021 Golden",
        "lessThanOrEqual": "Apriso 2021 SP2",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Apriso 2022 Golden"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.3ds.com/vulnerability/advisories

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Related for CVELIST:CVE-2023-2141