Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

CVE-2024-3301

What is CVE-2024-3301?

An unsafe .NET object deserialization flaw exists in DELMIA Apriso versions ranging from 2019 through 2024. This vulnerability can be exploited to execute arbitrary code on the system after authentication, potentially allowing an attacker to gain unauthorized access and control over affected installations. Users of DELMIA Apriso are advised to apply available security updates promptly to mitigate the risks associated with this vulnerability.

References