DELMIA Apriso Code Injection Vulnerability (CVE-2025-6204)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(272202);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/11/04");

  script_cve_id("CVE-2025-6204");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/11/18");

  script_name(english:"DELMIA Apriso Code Injection Vulnerability (CVE-2025-6204)");

  script_set_attribute(attribute:"synopsis", value:
"DELMIA Apriso is affected by an Improper Control of Generation of Code that could allow execute arbitrary code.");
  script_set_attribute(attribute:"description", value:
"The version of DELMIA Apriso installed on the remote host is Release 2020 through Release 2025. It is, therefore, 
affected by an Improper Control of Generation of Code (Code Injection) vulnerability (CVE-2025-6204) that could 
allow an attacker to execute arbitrary code.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?00962b2b");
  script_set_attribute(attribute:"solution", value:
"Upgrade to the latest version.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:M/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-6204");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/08/04");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/08/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/11/03");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:3ds:delmia_apriso");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("dassault_systemes_delmia_apriso.nbin");
  script_require_keys("SMB/Registry/Enumerated", "installed_sw/Dassault Systèmes DELMIA Apriso");

  exit(0);
}

include('vcf.inc');

get_kb_item_or_exit('SMB/Registry/Enumerated');

var app_info = vcf::get_app_info(app:'Dassault Systèmes DELMIA Apriso', win_local:TRUE);
var product_year = app_info['product_version'];

if (empty_or_null(product_year))
{
    exit(0, "The release year of Dassault Systèmes DELMIA Apriso could not be determined.");;
}

if (product_year !~ "202[012345]")
{
    audit(AUDIT_HOST_NOT,'affected');
}

var report =
  '\n' + 'Nessus detected the vulnerable release:' +
  '\n' + join(product_year, sep:'\n') +
  'See Vendor Advisory.';

security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : report
  );