CVE-2024-3300

Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution.

Affected

Dassault Systèmes · DELMIA Apriso

CVSS v3.1 3DS

9.0 CRITICALCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

2.76% chance of exploitation in the next 30 days, 86th percentile

Nuclei

critical · CWE-502

Published

2024-05-30

Updated

2024-08-01

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3300.yaml

References

• CVE Record
• NVD entry