CVE-2023-6078

CRITICAL 9.8CVE-2023-6078 · Published 01/02/2024 · updated 17/06/2026

In short

CVE-2023-6078 is a CRITICAL (CVSS 9.8) vulnerability affecting biovia materials studio (3ds).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
biovia materials studio 3ds	`≥ 2021, ≤ 2023`	No fix yet

Description

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution.

References

3ds.com/vulnerability/advisories · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free