cbcvebase.
CVE-2023-1997
published 2023-08-28

CVE-2023-1997: An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted…

PriorityP260high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.72%
74.7th percentile
An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.

Affected

6 ranges
VendorProductVersion rangeFixed in
3ds3dexperience——
3ds3dexperience——
3ds3dexperience——
dassault_syst_messimulia_3dorchestrateRelease 3DEXPERIENCE R2021x Golden – Release 3DEXPERIENCE R2021x.FP.CFA.2306—
dassault_syst_messimulia_3dorchestrateRelease 3DEXPERIENCE R2022x Golden – Release 3DEXPERIENCE R2022x FP.CFA.2310—
dassault_syst_messimulia_3dorchestrateRelease 3DEXPERIENCE R2023x Golden – Release 3DEXPERIENCE R2023x.FP.CFA.2314—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.