CVE-2023-1997: 3ds 3dexperience

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.

Affected products

• 3ds 3dexperience: version r2021x only; version r2022x only; version r2023x only

Published 2023-08-28. Last modified 2026-06-17.