OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023

CVE-2023-6078

What is CVE-2023-6078?

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Dassault Systèmes, spanning Releases 2021 to 2023. This vulnerability allows attackers to upload a specially crafted perl script, potentially leading to arbitrary execution of system commands. Organizations using affected versions should evaluate their security posture and apply necessary mitigations to prevent exploitation.

References