CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2023-29473

CVSS 9.8v3.1pub. 2023-04-06upd. 2025-02-12

webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Atos Unify Openscape 4000

    APP
    Atos
    10

  • Atos Unify Openscape 4000 Manager

    APP
    Atos
    10
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-35034CRITICAL9.8PL ✓same product

RCE dla nieuwierzytelnionych użytkowników w Atos Unify OpenScape 4000

CVE-2023-29475CRITICAL9.8PL ✓same product

RCE bez uwierzytelnienia w Atos Unify OpenScape 4000 Platform

CVE-2023-29474CRITICAL9.8PL ✓same product

RCE bez uwierzytelnienia w Atos Unify OpenScape 4000 – command injection

CVE-2022-46404CRITICAL9.8PL ✓same product

Command injection w Atos Unify OpenScape 4000 — dostęp administracyjny bez uwierzytelnienia

CVE-2023-45349HIGH7.5same product

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 ...