webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://networks.unify.com/security/advisories/OBSO-2303-01.pdf - Vendor Advisory | |
| References | () https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/ - Third Party Advisory |
13 Apr 2023, 18:03
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Atos unify Openscape 4000
Atos Atos unify Openscape 4000 Manager |
|
| CPE | cpe:2.3:a:atos:unify_openscape_4000:10:r1:*:*:*:*:*:* cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:* |
|
| References | (MISC) https://networks.unify.com/security/advisories/OBSO-2303-01.pdf - Vendor Advisory | |
| References | (MISC) https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/ - Third Party Advisory | |
| CWE | CWE-77 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
06 Apr 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-06 23:15
Updated : 2025-02-12 17:15
NVD link : CVE-2023-29473
Mitre link : CVE-2023-29473
CVE.ORG link : CVE-2023-29473
JSON object : View
Products Affected
atos
- unify_openscape_4000_manager
- unify_openscape_4000
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')