PT-2023-25105 · Atos · Atos Unify Openscape 4000 Assistant+1

Publicado 2023-06-12 · Atualizado 2023-06-20 · CVE-2023-35033

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Atos Unify OpenScape 4000 Assistant versions V10 R0 through V10 R1.34.7 Atos Unify OpenScape 4000 Assistant versions V10 R1 through V10 R1.41.9 Atos Unify OpenScape 4000 Manager versions V10 R0 through V10 R1.34.7 Atos Unify OpenScape 4000 Manager versions V10 R1 through V10 R1.41.9

Description The issue allows command injection by authenticated users.

Recommendations For Atos Unify OpenScape 4000 Assistant version V10 R1, update to version V10 R1.42.0 or V10 R1.34.8. For Atos Unify OpenScape 4000 Assistant version V10 R0, update to version V10 R1.42.0 or V10 R1.34.8. For Atos Unify OpenScape 4000 Manager version V10 R1, update to version V10 R1.42.0 or V10 R1.34.8. For Atos Unify OpenScape 4000 Manager version V10 R0, update to version V10 R1.42.0 or V10 R1.34.8.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2023-35033

Produtos afetados

Atos Unify Openscape 4000 Assistant

Atos Unify Openscape 4000 Manager

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-35033 · Aviso do Fabricante
• https://t.me/cvenotify/52726 · Publicação no Telegram
• https://t.me/cvenotify/52145 · Publicação no Telegram
• https://news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-35033 · Nota de Segurança
• https://networks.unify.com/security/advisories/OBSO-2305-01.pdf · Aviso do Fabricante