CVE-2023-45350

Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may lead to the ability of an authenticated attacker to run arbitrary code via AScm. This is also known as OSFOURK-24034.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*

History

12 Oct 2023, 18:36

Type Values Removed Values Added
First Time Atos
Atos unify Openscape 4000 Manager
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
CPE cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:*:*:*:*:*:*
References (MISC) https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - (MISC) https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - Press/Media Coverage
References (MISC) https://networks.unify.com/security/advisories/OBSO-2306-01.pdf - (MISC) https://networks.unify.com/security/advisories/OBSO-2306-01.pdf - Vendor Advisory

09 Oct 2023, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-09 04:15

Updated : 2023-12-10 15:14


NVD link : CVE-2023-45350

Mitre link : CVE-2023-45350

CVE.ORG link : CVE-2023-45350


JSON object : View

Products Affected

atos

  • unify_openscape_4000_manager