CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2023-29474

CVSS 9.8v3.1pub. 2023-04-06upd. 2025-02-12

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23552.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Atos Unify Openscape 4000

    APP
    Atos
    10

  • Atos Unify Openscape 4000 Manager

    APP
    Atos
    10
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-35034CRITICAL9.8ten sam produkt

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1...

CVE-2023-29475CRITICAL9.8ten sam produkt

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 al...

CVE-2023-29473CRITICAL9.8ten sam produkt

webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 a...

CVE-2022-46404CRITICAL9.8ten sam produkt

A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenSca...

CVE-2023-45349HIGH7.5ten sam produkt

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 ...