CVE-2023-45349: Undefined Security Weakness

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr...

CVE-2023-45351: Improper Neutralization of Special Elements used in a Command

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039...

CVE-2023-35033

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23556...

CVE-2023-35035

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557...

CVE-2023-35031

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-24036...

CVE-2023-35031

CVE-2023-35031 affects Atos Unify OpenScape 4000 components: Assistant and Manager in V10 R0 or V10 R1 with prior builds to V10 R1.42.0/V10 R1.34.8. The issue allows command injection by authenticated users, per the CVE entry. CVSS v3.1 base score 8.8 (HIGH); attack vector NETWORK; require LOW pr...

CVE-2023-35032

CVE-2023-35032 affects Atos Unify OpenScape 4000 Assistant (V10 R1 before R1.42.0 and before R1.34.8) and Manager (V10 R1 before R1.42.0 and before R1.34.8); authenticated users can trigger a command injection. CVSS v3.1 base score 8.8 (HIGH) with network attack vector, low attack complexity, pri...

PT-2023-25103 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions V10 R0, V10 R1 before V10 R1.42.0 and V10 R1.34.8 Atos Unify OpenScape 4000 Manager versions V10 R0, V10 R1 before V10 R1.42.0 and V10 R1.34.8 Description: The issue allows command injection by...

CVE-2023-35033: Improper Neutralization of Special Elements used in a Command

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23556...

CVE-2023-35034: Improper Control of Generation of Code

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033...

CVE-2023-35035: Improper Neutralization of Special Elements used in a Command

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557...

PT-2023-25106 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions prior to V10 R1.42.0 and prior to V10 R1.34.8 Atos Unify OpenScape 4000 Manager versions prior to V10 R1.42.0 and prior to V10 R1.34.8 Description: The issue allows remote code execution by...

CVE-2023-35032: Improper Neutralization of Special Elements used in a Command

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554...

PT-2023-25107 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions V10 R0 through V10 R1.34.7 Atos Unify OpenScape 4000 Assistant versions V10 R1 through V10 R1.41.9 Atos Unify OpenScape 4000 Manager versions V10 R0 through V10 R1.34.7 Atos Unify OpenScape 4000...

CVE-2022-46404

A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager 8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4 that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to th...

CVE-2022-46404: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager 8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4 that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to th...