Critical Security Alert: Hackers Actively Exploiting Dassault Manufacturing Software Vulnerability

Heads up everyone - we've got a serious situation developing with Dassault's DELMIA Apriso software. If your organization uses this for manufacturing operations (and a lot of big companies do), you need to know about this one.

The short version: Hackers found a critical vulnerability that lets them run malicious code on Apriso systems remotely. And the really bad news? They're already actively exploiting it.

The Technical Details (In Plain English)

Here's what we know:

• The vulnerability (CVE-2025-5086) has a CVSS score of 9.0 out of 10. In security-speak, that's basically "drop everything and fix this now" territory.

• It affects ALL versions of DELMIA Apriso from Release 2020 through 2025

• The attack method involves sending a specially crafted SOAP request that can execute malicious .NET code on the target system

Think of it like finding out someone can unlock your front door without a key - and not only that, but burglars are already using this trick in neighborhoods across the country.

Why This Is Particularly Dangerous

Manufacturing software vulnerabilities are especially concerning because they can affect physical operations. We're not just talking about stolen data here - this could potentially impact actual manufacturing processes.

CISA (the Cybersecurity and Infrastructure Security Agency) is taking this so seriously that they've added it to their Known Exploited Vulnerabilities (KEV) catalog. They're giving federal agencies until October 2 to either patch their systems or implement workarounds.

What You Need to Do Right Now

If your organization uses Dassault Apriso:

1. Immediately check your version number

2. Apply the latest security patches from Dassault (they've released fixes)

3. If you can't patch immediately, consider temporarily isolating these systems from non-essential network access

4. Monitor your Apriso systems for any suspicious activity

Beyond Just Patching

While patching is crucial, this is also a wake-up call about manufacturing system security in general. I've seen too many organizations learn this lesson the hard way, which is why I always recommend implementing some form of continuous security monitoring.

For organizations looking to better protect their manufacturing systems, I personally use and recommend Malwarebytes Premium for endpoint protection. It's particularly good at catching suspicious behavior that might indicate an exploitation attempt, and it's what I've set up for several manufacturing clients.

The Bigger Picture

While this directive is technically only binding for federal agencies, every organization using Apriso should treat this with the same urgency. Manufacturing software vulnerabilities are increasingly becoming targets for cybercriminals, and the potential impact goes way beyond just data breaches.

Key Takeaways

• This is an actively exploited vulnerability - it's not theoretical

• The impact could affect physical manufacturing operations

• Immediate patching is critical

• If you can't patch immediately, implement additional monitoring and network isolation

We'll update this article as more information becomes available. In the meantime, if you're responsible for manufacturing systems security, make this your top priority today.

Quick heads up:Some links in this article are affiliate links. If you buy something through them, we might earn a small commission (doesn't cost you extra). We only recommend stuff we'd actually use ourselves or set up for our own families. No BS recommendations here.