CVE-2025-5086

Published Jun 2, 2025

Last updated 7 days ago

DELMIA Apriso

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-5086 is a deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025. Exploitation of this vulnerability could lead to remote code execution. Specifically, the vulnerability exists because the application does not properly validate data during the deserialization process. An attacker could potentially execute arbitrary code remotely without requiring user interaction, leading to a full system compromise, unauthorized code execution, potential data theft or manipulation, or complete system availability disruption.

Description: A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.
Source: 3DS.Information-Security@3ds.com
NVD status: Modified
Products: delmia_apriso

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9
Impact score: 6
Exploitability score: 2.2
Vector string: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
Exploit added on: Sep 11, 2025
Exploit action due: Oct 2, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

3DS.Information-Security@3ds.com: CWE-502

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:3ds:delmia_apriso:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "809F8ACE-5686-4178-ACF7-D6968035FCF5",
            "versionEndIncluding": "2025",
            "versionStartIncluding": "2020"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.