CVE-2023-35035

Опубликовано: 12 июн. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557.

Ссылки

https://networks.unify.com/security/advisories/OBSO-2305-01.pdf
Vendor Advisory
https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/
Press/Media Coverage
Third Party Advisory
https://networks.unify.com/security/advisories/OBSO-2305-01.pdf
Vendor Advisory
https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/
Press/Media Coverage
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r0:*:*:*:*:*:*

cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1:*:*:*:*:*:*

cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1.34.4:*:*:*:*:*:*

cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:*:*:*:*:*:*

cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*

cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1.34.4:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02252

Низкий

8.8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

GHSA-r6wp-p9q7-5m63