PT-2025-41776 · Dassault Systèmes · 3Dexperience

Published 2025-10-13 · Updated 2025-10-14 · CVE-2025-9976

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 3DEXPERIENCE versions R2022x through R2025x

Description An OS Command Injection vulnerability exists in the Station Launcher App within the 3DEXPERIENCE platform. This issue could allow an attacker to execute arbitrary code on a user’s machine.

Recommendations Update to a version later than 3DEXPERIENCE R2025x.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-9976

Affected Products

3Dexperience

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-9976 · Security Note
• https://t.me/CVEtracker/34767 · Telegram Post
• https://3ds.com/trust-center/security/security-advisories/cve-2025-9976 · Note
• https://t.me/cveNotify/138440 · Telegram Post
• https://t.me/poxek/5595 · Telegram Post