CVE-2024-3301
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024
An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
DELMIA Apriso
- Vendor
- Dassault Systèmes
- Product
- DELMIA Apriso
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Release 2019 Golden | affected | custom | Unavailable | Release 2019 SP5 | None listed |
| Release 2020 Golden | affected | custom | Unavailable | Release 2020 SP4 | None listed |
| Release 2021 Golden | affected | custom | Unavailable | Release 2021 SP3 | None listed |
| Release 2022 Golden | affected | custom | Unavailable | Release 2022 SP3 | None listed |
| Release 2023 Golden | affected | custom | Unavailable | Release 2023 SP2 | None listed |
| Release 2024 Golden | affected | custom | Unavailable | Release 2024 SP1 | None listed |