Unscored CVE-2023-35034 EUVD-2023-39071GHSA-mm93-3hgx-48rj

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow r…

Published Jun 12, 2023 · Updated Jan 6, 2025 · Assigned by mitre

Description

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033.

Advisories 1

WID-SEC-2023-1121 Unify OpenScape 4000: Mehrere Schwachstelle ermöglicht Ausführen von beliebigem Programmcode BSI CERT-Bund (WID) · Jun 11, 2023

References

https://networks.unify.com/security/advisories/OBSO-2305-01.pdf
https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/