3DEXPERIENCE Vulnerable to OS Command Injection

CVE-2024-1624

What is CVE-2024-1624?

The vulnerability presents an OS Command Injection issue within the documentation server of certain Dassault Systèmes products. This flaw exists across multiple versions of the 3DEXPERIENCE platform, SIMULIA Abaqus, SIMULIA Isight, and CATIA Composer. An attacker could craft a malicious HTTP request to execute arbitrary commands on the system, potentially compromising the integrity and security of the affected applications. The impact of such exploitation emphasizes the importance of timely patches and security measures for organizations utilizing these solutions.

References