CVE-2024-3301

HighCVSS 8.5/10Last modified Jun 17, 2026

Description

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
May 30, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-330107.5Transient DOS while parsing fragments of MBSSID IE from beacon frame.CVE-2024-330117.5Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.CVE-2024-330127.5Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.CVE-2024-330137.5Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.CVE-2024-330147.5Transient DOS while parsing ESP IE from beacon/probe response frame.CVE-2024-330157.5Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor repoCVE-2024-330166.8memory corruption when an invalid firehose patch command is invoked.CVE-2024-330187.5Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.CVE-2024-330197.5Transient DOS while parsing the received TID-to-link mapping action frame.CVE-2024-33023.7There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of MemoryCVE-2024-330207.5Transient DOS while processing TID-to-link mapping IE elements.CVE-2024-330217.8Memory corruption while processing IOCTL call to set metainfo.
CVE-2024-3301: High severity, CVSS 8.5 | Vulnix