Lucene search

K
nvd[email protected]NVD:CVE-2023-45351
HistoryOct 09, 2023 - 4:15 a.m.

CVE-2023-45351

2023-10-0904:15:53
CWE-77
web.nvd.nist.gov
2
atos unify openscape
command injection
osfourk-24039

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.001

Percentile

23.6%

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039.

Affected configurations

Nvd
Node
atosunify_openscape_4000_assistantMatch10r0
OR
atosunify_openscape_4000_assistantMatch10r1
OR
atosunify_openscape_4000_managerMatch10r0
OR
atosunify_openscape_4000_managerMatch10r1
VendorProductVersionCPE
atosunify_openscape_4000_assistant10cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r0:*:*:*:*:*:*
atosunify_openscape_4000_assistant10cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1:*:*:*:*:*:*
atosunify_openscape_4000_manager10cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:*:*:*:*:*:*
atosunify_openscape_4000_manager10cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.001

Percentile

23.6%

Related for NVD:CVE-2023-45351