What’s Vulnerable › Vulnerabilities

CVE-2024-3300: Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

• Severity: critical (CVSS 9.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-05-30 · updated 2026-06-17
• Weakness: CWE-502

Description

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution.

Affected products

• Dassault Systèmes DELMIA Apriso: from release_2019_golden through release_2019_sp5; from release_2020_golden through release_2020_sp4; from release_2021_golden through release_2021_sp3; from release_2022_golden through release_2022_sp3; from release_2023_golden through release_2023_sp2; from release_2024_golden through release_2024_sp1

References

• https://www.3ds.com/vulnerability/advisories
• https://www.3ds.com/vulnerability/advisories

Get alerted when CVE-2024-3300 or the next vulnerability affects your stack