High WID-SEC-2023-1477 3 CVEs

Unify OpenScape Voice: Mehrere Schwachstellen

Published Jun 14, 2023 · Updated Feb 8, 2024 · Revision 2 · de-DE

Vendor: Unify Product: OpenScape Voice

Summary

Ein Angreifer kann mehrere Schwachstellen in Unify OpenScape Voice ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.

Product

OpenScape Voice ist eine SIP-basierte Enterprise VoIP Lösung.

Vulnerabilities 3

High 8.8

CVE-2023-40263

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated comma…

Feb 8, 2024
Medium 6.1

CVE-2023-40262

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Sto…

Feb 8, 2024
Medium 4.3

CVE-2023-40264

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path …

Feb 8, 2024

Revision history

2024-02-08 #2
CVE-Nummern ergänzt
2023-06-14 #1
Initiale Fassung

References

Atos Unify Security Advisory Report - OBSO-2305-02 vom 2023-06-14
https://networks.unify.com/security/advisories/OBSO-2305-02.pdf