CVE-2023-2141
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022
An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
DELMIA Apriso
- Vendor
- Dassault Systèmes
- Product
- DELMIA Apriso
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Apriso 2017 Golden | affected | custom | Unavailable | Apriso 2017 SP7 | None listed |
| Apriso 2018 Golden | affected | custom | Unavailable | Apriso 2018 SP4 | None listed |
| Apriso 2019 Golden | affected | custom | Unavailable | Apriso 2019 SP5 | None listed |
| Apriso 2020 Golden | affected | custom | Unavailable | Apriso 2020 SP4 | None listed |
| Apriso 2021 Golden | affected | custom | Unavailable | Apriso 2021 SP2 | None listed |
| Apriso 2022 Golden | affected | Unavailable | Unavailable | Unavailable | None listed |