RCE in Dassault Systèmes Station Launcher App In 3dexperience Platform
CVE-2025-9976
An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an attacker to execute arbitrary code on the user's machine.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.009 (56.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Dassault Systèmes Station Launcher App In 3dexperience Platform — versions Release 3DEXPERIENCE R2022x Golden, Release 3DEXPERIENCE R2023x Golden, Release 3DEXPERIENCE R2024x Golden
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-9976?
- CVE-2025-9976 is a critical-severity vulnerability in Dassault Systèmes Station Launcher App In 3dexperience Platform, classified under OS Command Injection. CVSS score: 9.0/10. Published 2025-10-13.
- How severe is CVE-2025-9976?
- Critical severity. CVSS v3 base score is 9.0 out of 10.