Skip to content
OpenAdvisories
High · 8.8 CVE-2023-1997 EUVD-2023-24177GHSA-9fp3-x7mf-h9vj

OS Command Injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x

Published Aug 28, 2023 · Updated Oct 2, 2024 · Assigned by 3DS

Vendor: Dassault Systèmes Product: SIMULIA 3DOrchestrate

Description

An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.

Affected products

VendorProductAffectedFixed
Dassault Systèmes SIMULIA 3DOrchestrate Release 3DEXPERIENCE R2021x Golden – ≤ Release 3DEXPERIENCE R2021x.FP.CFA.2306, Release 3DEXPERIENCE R2022x Golden – ≤ Release 3DEXPERIENCE R2022x FP.CFA.2310, Release 3DEXPERIENCE R2023x Golden – ≤ Release 3DEXPERIENCE R2023x.FP.CFA.2314 —

References