by Kastro
Paper/Archive/CVE-2023-6078

CVE-2023-6078

Dassault Systèmes BIOVIA Materials Studio products — OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 76.4.764 × 2015.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution.

Affected

ProductAffectedFixed inSource
BIOVIA Materials Studio productsBIOVIA 2021 Golden–CNA
BIOVIA Materials Studio productsBIOVIA 2022 Golden–CNA
BIOVIA Materials Studio productsBIOVIA 2023 Golden–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3DS (CNA)8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

ref3ds.com/vulnerability/advisories