PT-2025-31802 · Dassault Systèmes · Delmia Apriso

Published 2025-08-04 · Updated 2025-10-31 · CVE-2025-6204

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dassault Systèmes DELMIA Apriso versions 2020 through 2025

Description An Improper Control of Generation of Code (Code Injection) issue exists in DELMIA Apriso. This could allow an attacker to execute arbitrary code. The vulnerability is actively being exploited in the wild. The issue affects a widely used manufacturing operations management solution. The vulnerability allows for code injection, potentially through file upload leading to Remote Code Execution (RCE).

Recommendations Versions 2020 through 2025: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-6204

Affected Products

Delmia Apriso

References · 26

• https://nvd.nist.gov/vuln/detail/CVE-2025-6204 · Security Note
• https://osv.dev/vulnerability/CVE-2025-6204 · Vendor Advisory
• https://reddit.com/r/DefenceProfessionals/comments/1oj7d55/cisa_alerts_on_active_exploitation_of_critical · Reddit Post
• https://twitter.com/TechNadu/status/1983573202455687665 · Twitter Post
• https://twitter.com/CVEnew/status/1952300534498521529 · Twitter Post
• https://reddit.com/r/TechNadu/comments/1oj9q0u/cisa_adds_two_new_delmia_apriso_vulnerabilities · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1oizhz7/active_exploits_hit_dassault_and_xwiki_cisa · Reddit Post
• https://twitter.com/cracbot/status/1954135616263712975 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1oj96fk/cisa_alerts_to_dangerous_delmia_factory_software · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1okqilw/top_10_trending_cves_31102025 · Reddit Post
• https://t.me/CVEtracker/29082 · Telegram Post
• https://twitter.com/NSIguy/status/1983617327443652900 · Twitter Post
• https://twitter.com/CISACyber/status/1983225881578414330 · Twitter Post
• https://3ds.com/trust-center/security/security-advisories/cve-2025-6204 · Security Note, Vendor Advisory
• https://twitter.com/pdnuclei_bot/status/1970488360645886085 · Twitter Post