CVE-2023-1997 is a high-severity OS Command Injection vulnerability affecting SIMULIA 3DOrchestrate software from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. This vulnerability allows an attacker to execute arbitrary commands on affected systems by sending a specially crafted HTTP request. It is crucial for users of these software versions to be aware of this vulnerability and take necessary precautions to protect their systems.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, check if you're using SIMULIA 3DOrchestrate software from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. These versions have a high-severity OS Command Injection vulnerability that could allow an attacker to execute arbitrary commands on your system. If you're using one of these affected versions, it's important to be aware of this issue and take necessary precautions.

What should I do if I'm affected?

If you're affected by the vulnerability, follow these simple steps. First, visit Dassault Systèmes' Security Advisories page. Locate the CVE-2023-1997 entry in the table. Then, click the Support Knowledge Base (KB) link for detailed information and mitigation steps. Follow the recommended actions to protect your system.

Is CVE-2023-1997 in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, it is in CISA's Known Exploited Vulnerabilities Catalog. It's an OS Command Injection issue in SIMULIA 3DOrchestrate software. The vulnerability was added to the catalog on August 30, 2023. There's no specific due date or required action mentioned, but it's advised to refer to the vendor advisory for mitigation steps or patches.

Weakness enumeration

The weakness enumeration for CVE-2023-1997 is CWE-78, which refers to improper neutralization of special elements in an OS command, potentially leading to command injection.

For more details

CVE-2023-1997 is a significant vulnerability affecting SIMULIA 3DOrchestrate software, with potential consequences for affected systems. By addressing this issue and implementing appropriate mitigation strategies, users can better protect their systems from potential exploitation. For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• NVD - CVE-2023-1997

• Dassault Systèmes Security Advisories