cbcvebase.
CVE-2024-1624
published 2024-03-01

CVE-2024-1624: An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x…

PriorityP266critical9.4CVSS 3.1
AVNACLPRNUINSUCLIHAH
EPSS
2.14%
79.8th percentile
An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x, SIMULIA Abaqus from Release 2022 through Release 2024, SIMULIA Isight from Release 2022 through Release 2024 and CATIA Composer from Release R2023 through Release R2024. A specially crafted HTTP request can lead to arbitrary command execution.

Affected

11 ranges
VendorProductVersion rangeFixed in
dassault_syst_mesdocumentation_server——
dassault_syst_mesdocumentation_server——
dassault_syst_mesdocumentation_server——
dassault_syst_mesdocumentation_serverCATIA Composer Release R2023 Golden – CATIA Composer Release R2023 Refresh4—
dassault_syst_mesdocumentation_serverCATIA Composer Release R2024 Golden – CATIA Composer Release R2024 Refresh3—
dassault_syst_mesdocumentation_serverRelease 3DEXPERIENCE R2022x Golden – Release 3DEXPERIENCE R2022x.FP.CFA.2406—
dassault_syst_mesdocumentation_serverRelease 3DEXPERIENCE R2023x Golden – Release 3DEXPERIENCE R2023x FP.CFA.2350—
dassault_syst_mesdocumentation_serverRelease 3DEXPERIENCE R2024x Golden – Release 3DEXPERIENCE R2024x.FP.CFA.2405—
dassault_syst_mesdocumentation_serverSIMULIA Abaqus Release 2022 Golden – SIMULIA Abaqus Release 2022.FP.CFA.2406—
dassault_syst_mesdocumentation_serverSIMULIA Abaqus Release 2023 Golden – SIMULIA Abaqus Release 2023.FP.CFA.2350—
dassault_syst_mesdocumentation_serverSIMULIA Abaqus Release 2024 Golden – SIMULIA Abaqus Release 2024.FP.CFA.2405—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.