Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9epss 2.8%
exploitation probability
2.8%top 15% of all CVEs
observed exploitation
nono source reports it
An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Dassault Systèmes · DELMIA Apriso