EUVD-2013-4626

Malware in sbrugna...

CVE-2023-6269

An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" SBC and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticat...

The vulnerability of the application programming interface of the microprogramming system for controller security and session management in IP networks – OpenScape SBC (Session Border Controller). This software serves as an integration tool for communication systems into the unified communication system – OpenScape BCF (Business Communication Fabric). The OpenScape Branch server allows attackers to perform arbitrary actions.

The vulnerability of the application software interface for microprogramming controllers, which is used for security purposes and managing communication sessions in IP networks—the OpenScape SBC Session Border Controller—as well as the software used to integrate communication systems into the...

CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

CVE-2023-36619: Improper Input Validation

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

CVE-2023-36618: Improper Neutralization of Special Elements used in an OS Command

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

Atos Unify OpenScape Code Execution / Missing Authentication Vulnerabilities

Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch, and Atos Unify OpenScape BCF suffer from remote code execution and missing authentication vulnerabilities. Atos OpenScape SBC versions before 10 R3.3.0, Branch version 10 versions before R3.3.0, and BCF version 10 versio...

CVE-2013-4780: Exposure of Sensitive Information to an Unauthorized Actor

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

PT-2013-5185

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to obtain sensitive server and statistics...

CVE-2013-4779: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4778: Exposure of Sensitive Information to an Unauthorized Actor

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

PT-2013-5187

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to read arbitrary files via unspecified vectors,...

CVE-2013-4781: Improper Neutralization of Special Elements used in an OS Command

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors...

PT-2013-5188

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to execute arbitrary commands via unspecified...

PT-2013-5186

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description A cross-site scripting XSS issue exists in the core/handleTw.php file, allowing...