Critical Vulnerability in Dassault Systèmes DELMIA Apriso Exposes Systems to Remote Code Execution

What changed

A significant vulnerability has been discovered in Dassault Systèmes DELMIA Apriso, specifically related to the deserialization of untrusted data. This flaw poses a serious risk as it could lead to remote code execution, potentially allowing malicious actors to gain control over affected systems.

Who is affected

The vulnerability impacts a range of users and organizations utilizing the DELMIA Apriso platform. Those in manufacturing and supply chain management sectors are particularly at risk.

This includes:

• Organizations using DELMIA Apriso from Release 2020 to Release 2025.
• Manufacturing companies relying on DELMIA for operational efficiency.
• Supply chain management firms integrating DELMIA Apriso into their workflows.

What to do

Organizations should prioritize assessing their systems for the presence of this vulnerability. It is crucial to implement security measures to mitigate potential risks associated with this issue.

Recommendations include:

• Review and update to the latest version of DELMIA Apriso to ensure all security patches are applied.
• Conduct a thorough security audit of systems using DELMIA Apriso.
• Educate staff on the implications of this vulnerability and best practices for secure data handling.