đź”´ HIGHadvisory

Delmia Apriso Systems Under Attack

CISA warns of active exploitation in Delmia Apriso manufacturing operations management software by Dassault Systems. Attackers leverage CVE-2025-6204 and CVE-2025-6205 for code injection and privilege escalation. Affected users include defense contractors and major industrial manufacturers.

🎯CORTEX Protocol Intelligence Assessment

Business Impact: Direct threat to OT manufacturing platforms supporting defense and aerospace supply chains. Technical Context: Exploitation allows arbitrary code execution and unauthorized system control via unpatched modules.

⚡Strategic Intelligence Guidance

  • Apply Dassault’s August security patches immediately.
  • Restrict internet exposure of Delmia Apriso endpoints.
  • Monitor for exploitation indicators including malicious DLL downloads.
  • Engage CISA and vendor partners for coordinated patch assurance.

CVEs

CVE-2025-6204CVE-2025-6205

Vendors

Dassault Systems

Threats

Exploitation Campaigns

Targets

ManufacturingAerospaceDefense
Intelligence Source: Delmia Apriso Systems Under Attack - GovInfoSecurity | Oct 29, 2025