High WID-SEC-2023-1474 3 CVEs

Unify OpenScape 4000: Mehrere Schwachstellen

Published Jun 14, 2023 · Updated Oct 8, 2023 · Revision 2 · de-DE

Vendor: Unify Product: OpenScape 4000 Product: OpenScape 4000 Assistant < V10 R1.34.7 Product: OpenScape 4000 Assistant < V10 R1.42.1 Product: OpenScape 4000 Manager < V10 R1.34.7 Product: OpenScape 4000 Manager < V10 R1.42.1

Summary

Ein Angreifer kann mehrere Schwachstellen in Unify OpenScape 4000 ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.

Product

OpenScape 4000 ist eine konvergente Kommunikationslösung und bietet eine Prozess- und Workflow-Integration.

Vulnerabilities 3

Unscored —

CVE-2023-45349

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 …

Oct 9, 2023
Unscored —

CVE-2023-45350

Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may…

Oct 9, 2023
Unscored —

CVE-2023-45351

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1…

Oct 9, 2023

Revision history

2023-10-08 #2
CVE ergänzt
2023-06-14 #1
Initiale Fassung

References

Atos Unify Security Advisory Report - OBSO-2306-01 vom 2023-06-14
https://networks.unify.com/security/advisories/OBSO-2306-01.pdf