Skip to content
Connect AISign inSign up free
CVE-2023-21418.5HighCWE-502

CVE-2023-2141: Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022

Dassault Systèmes · DELMIA Apriso

Affected: Dassault Systèmes DELMIA Apriso · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.0%probability of exploitation in the next 30 days
64th percentile
050100

Higher than 64% of scored CVEs

8.5HighCVSS 3.1
LowHigh

DescriptionCVE.org

An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Dassault Systèmes · DELMIA Aprisofrom Apriso 2017 Golden up to and including Apriso 2017 SP7; from Apriso 2018 Golden up to and including Apriso 2018 SP4; from Apriso 2019 Golden up to and including Apriso 2019 SP5; from Apriso 2020 Golden up to and including Apriso 2020 SP4; from Apriso 2021 Golden up to and including Apriso 2021 SP2; Apriso 2022 Golden

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Published
April 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-2141 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References