High · 8.8 CVE-2023-6078 EUVD-2023-58334GHSA-h6hc-84g9-qq4q

OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023

Published Feb 1, 2024 · Updated Jun 9, 2025 · Assigned by 3DS

Vendor: Dassault Systèmes Product: BIOVIA Materials Studio products

Description

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution.

Affected products

Vendor	Product	Affected	Fixed
Dassault Systèmes	BIOVIA Materials Studio products	BIOVIA 2021 Golden, BIOVIA 2022 Golden, BIOVIA 2023 Golden	—

References

https://www.3ds.com/vulnerability/advisories