CVE-2023-6078

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Dassault Systèmes	BIOVIA Materials Studio products	BIOVIA 2021 Golden; BIOVIA 2022 Golden; BIOVIA 2023 Golden

References

https://www.3ds.com/vulnerability/advisoriesVendor Advisory
https://www.3ds.com/vulnerability/advisoriesVendor Advisory

Timeline

Published: Feb 1, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-60807.8Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation vulnerability which allows CVE-2023-60815.4The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such a CVE-2023-60825.4The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such a CVE-2023-60849.8A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of t CVE-2023-60907.2Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments f CVE-2023-60917.2Unrestricted Upload of File with Dangerous Type vulnerability in mndpsingh287 Theme Editor.This issue affects Theme Editor: from n/a through CVE-2023-60936.1A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused CVE-2023-60945.3A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from lack of pro CVE-2023-60958.9Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject mal CVE-2023-60967.4Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is b CVE-2023-60978.8A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a rem CVE-2023-60986.1An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker could send a specially