CVE-2024-3300 PoC — Dassault Systèmes DELMIA Apriso 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3300.yaml

Associated Vulnerability

Title:Dassault Systèmes DELMIA Apriso 安全漏洞 (CVE-2024-3300)
Description:Dassault Systèmes DELMIA Apriso是法国达索系统（Dassault Systèmes）公司的一款数字化企业的互动制造应用软件。 Dassault Systèmes DELMIA Apriso Release 2019至2024版本存在安全漏洞，该漏洞源于.NET对象存在反序列化漏洞。攻击者可利用该漏洞执行远程代码.

Description

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution.

File Snapshot


 id: CVE-2024-3300

info:
  name: Delmia Apriso - Pre-Authentication Unsafe .NET Object Deserializati

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!