What is the severity of CVE-2023-6078?

CVE-2023-6078 has been classified as a critical severity vulnerability due to its potential for arbitrary command execution.

How do I fix CVE-2023-6078?

To mitigate CVE-2023-6078, users should update BIOVIA Materials Studio to the latest version released after 2023.

What type of vulnerability is CVE-2023-6078?

CVE-2023-6078 is categorized as an OS Command Injection vulnerability.

What can exploit CVE-2023-6078?

An attacker can exploit CVE-2023-6078 by uploading a specially crafted perl script that triggers arbitrary command execution.

Vulnerability/
CVE-2023-6078

critical

9.8

CWE

78 77

EPSS

0.099%

1/2/2024

2/8/2024

CVE-2023-6078: OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023

Q: What products are affected by CVE-2023-6078?

CVE-2023-6078 affects BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023.

First published: Thu Feb 01 2024(Updated: )

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution.

Credit: 3DS.Information-Security@3ds.com

Affected Software	Affected Version	How to fix
3ds Biovia Materials Studio	>=2021<=2023

Never miss a vulnerability like this again

Reference Links

https://www.3ds.com/vulnerability/advisories

Frequently Asked Questions

What is the severity of CVE-2023-6078?
CVE-2023-6078 has been classified as a critical severity vulnerability due to its potential for arbitrary command execution.
How do I fix CVE-2023-6078?
To mitigate CVE-2023-6078, users should update BIOVIA Materials Studio to the latest version released after 2023.
What products are affected by CVE-2023-6078?
CVE-2023-6078 affects BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023.
What type of vulnerability is CVE-2023-6078?
CVE-2023-6078 is categorized as an OS Command Injection vulnerability.
What can exploit CVE-2023-6078?
An attacker can exploit CVE-2023-6078 by uploading a specially crafted perl script that triggers arbitrary command execution.

agent/references
agent/weakness
agent/title
agent/description
agent/first-publish-date
agent/type
agent/author
agent/event
agent/severity
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/softwarecombine
collector/epss-latest
source/FIRST
agent/epss
agent/tags
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
vendor/3ds
canonical/3ds biovia materials studio
version/3ds biovia materials studio/2021
version/3ds biovia materials studio/2023

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.