EUVD-2025-209135
GHSA-8pjm-jgvr-53w9
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path canonicalization, traversal prevention
MITRE ATT&CK
2 techniques across 2 tactics: Discovery, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | The CVSS 7.1 (High) score reflects a genuine data security risk requiring prompt attention. The vulnerability is network-exploitable (AV:N) with low attack complexity (AC:L), meaning exploitation is straightforward once an attacker has valid credentials. Authentication requirements (PR:L) provide some mitigation as low-privilege credentials are needed, preventing completely unauthenticated exploitation. The impact profile shows high confidentiality impact (C:H) allowing sensitive file reads, low integrity impact (I:L) enabling limited file writes to specific directories, and no availability impact (A:N). No EPSS score is provided, but the authentication requirement and lack of known public exploits suggest lower immediate exploitation probability compared to unauthenticated flaws. However, in manufacturing environments where DELMIA manages critical production data, the confidentiality breach potential is significant. The scope is unchanged (S:U), limiting impact to the vulnerable component. No KEV listing indicates no confirmed active exploitation. Priority should be moderate-to-high for organizations using affected 3DEXPERIENCE releases, particularly those handling sensitive manufacturing IP or operational data through DELMIA Factory Resource Manager. |
| Exploit ScenarioDerived | An authenticated attacker with low-privilege credentials to the 3DEXPERIENCE platform identifies the vulnerable Factory Resource Management endpoint. By crafting HTTP requests with manipulated file path parameters containing directory traversal sequences, the attacker reads sensitive configuration files, license keys, or proprietary manufacturing data stored on the server. Subsequently, they write malicious files to specific accessible directories, potentially preparing for privilege escalation or persistence. In a targeted industrial espionage scenario, the attacker exfiltrates competitive manufacturing process data, CAD files, or production schedules managed by DELMIA, causing intellectual property loss without triggering availability-based alerting. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 31, 2026
Path traversal in DELMIA Factory Resource Manager (3DEXPERIENCE R2023x through R2025x) allows authenticated remote attackers to read sensitive files and write files to specific server directories. The vulnerability affects the Factory Resource Management component and requires low-privilege authentication (CVSS PR:L) with low attack complexity. EPSS data not available; no public exploit identified at time of analysis. This represents a significant data exposure risk in industrial manufacturing environments using Dassault Systèmes' 3DEXPERIENCE platform.
RemediationAI
Apply vendor-released security updates from Dassault Systèmes as documented in their official security advisory at https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10559. The advisory should specify patched versions for each affected 3DEXPERIENCE release family (R2023x, R2024x, R2025x). Until patches can be deployed, implement network-level access controls to restrict Factory Resource Manager access to trusted users and IP ranges only. Review and audit user privilege assignments to ensure principle of least privilege, as the vulnerability requires authenticated access. Monitor file system access logs for unusual traversal patterns or access to sensitive directories. Consider disabling the Factory Resource Management component if not actively required for operations. Organizations should prioritize patching systems that handle proprietary manufacturing data or connect to production networks.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
DELMIA Factory Resource Manager is a component of Dassault Systèmes' 3DEXPERIENCE platform used for manufacturing resource planning and factory simulation. The vulnerability is a CWE-22 path traversal flaw, where insufficient input validation allows attackers to manipulate file paths using directory traversal sequences (e.g., '../') to access files outside intended directories. The affected CPE (cpe:2.3:a:dassault_systèmes:delmia_factory_resource_manager) indicates this is a server-side component accessible over the network. Path traversal vulnerabilities typically occur when user-supplied input is concatenated into file system operations without proper sanitization, canonicalization, or whitelist validation. In this case, the Factory Resource Management module fails to restrict file operations to safe directories, enabling both read and write access to server filesystem locations that should be protected.
Know when Delmia Factory Resource Manager gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionCVE.org
A Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to read or write files in specific directories on the server.
Executive ViewAI
DELMIA Factory Resource Manager (3DEXPERIENCE R2023x-R2025x) contains a path traversal vulnerability allowing authenticated users with low-privilege access to read and write files across the server, creating direct exposure of sensitive manufacturing and operational data in industrial environments. Organizations running affected versions face immediate risk of intellectual property theft, production disruption, and regulatory compliance violations without compensating controls.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Restrict network access to Factory Resource Manager to administrative networks only via firewall rules; (2) Enforce strict file system permissions limiting the service account to essential directories, preventing traversal outside manufacturing data paths; (3) Disable low-privilege user accounts from accessing Factory Resource Manager until patch deployment; (4) Deploy file integrity monitoring on critical manufacturing configuration and data directories; (5) Enable and monitor all file access and write operations through application and OS-level logging for forensic detection of exploitation attempts.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
Exploit-DB