CVE-2023-45351

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039...

Atos Unify OpenScape Path Traversal Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from the execution of arbitrary code on the operating system via the Common Management Portal web interface A path traversal...

CVE-2023-45351

The connected PT-2023-29526 entry confirms an authenticated command injection vulnerability in Atos Unify OpenScape 4000 components: Assistant and Manager, specifically versions V10 R0 through V10 R1 before R1.42.1, with the issue arising from the AShbr component. The root cause is an insecure ha...

CVE-2023-45353

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting...

CVE-2023-45354

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web interface. This is also known as OCMP-6589...

Atos Unify OpenScape Command Injection Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from administrative access via the dtb page of the platform portal...

Atos Unify OpenScape Security Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from a lateral move to a backup system via AShbr...

CVE-2023-45355

Vulnerability summary (CVE-2023-45355) Affects Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and OpenScape 4000 Manager Platform V10 R1 before Hotfix V10 R1.42.2. The issue is insufficient input validation in the platform webservice, enabling a authenticated attacker to perf...

CVE-2023-45351

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039...

PT-2023-29524 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions prior to V10 R1.34.7 Atos Unify OpenScape 4000 Manager versions prior to V10 R1.34.7 Description: The Atos Unify OpenScape 4000 exposes sensitive information, potentially allowing lateral movement ...

PT-2023-29527 · Atos · Atos Unify Openscape Common Management Portal

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Common Management Portal versions prior to V10 R4.17.0 Atos Unify OpenScape Common Management Portal versions prior to V10 R5.1.0 Description: The issue allows an authenticated attacker to execute arbitrary code on the...

PT-2023-29525 · Atos · Atos Unify Openscape 4000 Manager

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Manager versions V10 R0 through V10 R1 before V10 R1.42.1 Description: The issue allows an authenticated attacker to potentially run arbitrary code via AScm, leading to privilege escalation. This may enable the...

CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

CVE-2023-36619

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

Design/Logic Flaw

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

CVE-2023-36619

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

CVE-2023-36619

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...