CRITICAL✓ PATCH🇬🇧 English

CVE-2023-29475

CVSS 9.8v3.1pub. 2023-04-06upd. 2025-02-12

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Atos Unify Openscape 4000

    APP
    Atos
    10

  • Atos Unify Openscape 4000 Manager

    APP
    Atos
    10
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2023-35034CRITICAL9.8ten sam produkt

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1...

CVE-2023-29474CRITICAL9.8ten sam produkt

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 al...

CVE-2023-29473CRITICAL9.8ten sam produkt

webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 a...

CVE-2022-46404CRITICAL9.8ten sam produkt

A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenSca...

CVE-2023-45349HIGH7.5ten sam produkt

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 ...