inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543.
References
Configurations
Configuration 1 (hide)
|
History
13 Apr 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:atos:unify_openscape_4000:10:r1:*:*:*:*:*:* cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:* |
|
| CWE | CWE-77 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Atos
Atos unify Openscape 4000 Manager Atos unify Openscape 4000 |
|
| References | (MISC) https://networks.unify.com/security/advisories/OBSO-2303-01.pdf - Vendor Advisory | |
| References | (MISC) https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/ - Third Party Advisory |
06 Apr 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-06 23:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-29475
Mitre link : CVE-2023-29475
CVE.ORG link : CVE-2023-29475
JSON object : View
Products Affected
atos
- unify_openscape_4000_manager
- unify_openscape_4000
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')