PT-2023-25104 · Atos · Atos Unify Openscape 4000 Assistant+1

Publicado 2023-06-12 · Atualizado 2023-06-20 · CVE-2023-35032

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Atos Unify OpenScape 4000 Assistant versions prior to V10 R1.42.0 and prior to V10 R1.34.8 Atos Unify OpenScape 4000 Manager versions prior to V10 R1.42.0 and prior to V10 R1.34.8

Description The issue allows command injection by authenticated users.

Recommendations For Atos Unify OpenScape 4000 Assistant versions prior to V10 R1.42.0 and prior to V10 R1.34.8, update to version V10 R1.42.0 or V10 R1.34.8. For Atos Unify OpenScape 4000 Manager versions prior to V10 R1.42.0 and prior to V10 R1.34.8, update to version V10 R1.42.0 or V10 R1.34.8.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2023-35032

Produtos afetados

Atos Unify Openscape 4000 Assistant

Atos Unify Openscape 4000 Manager

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-35032 · Aviso do Fabricante
• https://networks.unify.com/security/advisories/OBSO-2305-01.pdf · Aviso do Fabricante
• https://news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-35032 · Nota de Segurança
• https://t.me/cvenotify/52723 · Publicação no Telegram
• https://t.me/cvenotify/52146 · Publicação no Telegram