Unscored CVE-2023-35032 EUVD-2023-39069GHSA-w493-rcc4-rw32

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow c…

Published Jun 12, 2023 · Updated Jan 6, 2025 · Assigned by mitre

Description

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554.

Advisories 1

WID-SEC-2023-1121 Unify OpenScape 4000: Mehrere Schwachstelle ermöglicht Ausführen von beliebigem Programmcode BSI CERT-Bund (WID) · Jun 11, 2023

References

https://networks.unify.com/security/advisories/OBSO-2305-01.pdf
https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/