Skip to content
OpenAdvisories
High · 8.5 CVE-2023-2141 EUVD-2023-33660GHSA-4c8v-cr5p-rp5v

Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022

Published Apr 21, 2023 · Updated Feb 4, 2025 · Assigned by 3DS

Vendor: Dassault Systèmes Product: DELMIA Apriso

Description

An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution.

Affected products

VendorProductAffectedFixed
Dassault Systèmes DELMIA Apriso Apriso 2017 Golden – ≤ Apriso 2017 SP7, Apriso 2018 Golden – ≤ Apriso 2018 SP4, Apriso 2019 Golden – ≤ Apriso 2019 SP5, Apriso 2020 Golden – ≤ Apriso 2020 SP4, Apriso 2021 Golden – ≤ Apriso 2021 SP2, Apriso 2022 Golden —

References