423 matches found
CVE-2023-45350: Undefined Security Weakness
Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may lead to the ability of an authenticated attacker to run arbitrary code via AScm. This is also known as OSFOURK-24034...
CVE-2023-45351: Improper Neutralization of Special Elements used in a Command
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039...
CVE-2023-45352: Improper Limitation of a Pathname to a Restricted Directory
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This...
CVE-2023-45354: Undefined Security Weakness
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web interface. This is also known as OCMP-6589...
CVE-2023-45350
This CVE affects Atos Unify OpenScape 4000 Manager (versions V10 R0 through V10 R1 before V10 R1.42.1). The underlying issue allows an authenticated attacker to escalate privileges and potentially execute arbitrary code via AScm. The impact is consistent with a total compromise of the affected sy...
Atos Unify OpenScape Path Traversal Vulnerability
Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from the execution of arbitrary code on the operating system via the Common Management Portal web interface A path traversal...
CVE-2023-45352
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This...
CVE-2023-45353
CVE-2023-45353 affects Atos Unify OpenScape Common Management Portal (OCMP) prior to V10 R4.17.0 and prior to V10 R5.1.0. An authenticated attacker can upload and create arbitrary files via the web interface, enabling arbitrary code execution on the underlying OS. Root cause: insecure authenticat...
Atos Unify OpenScape Security Vulnerability
Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from running arbitrary code via AScm...
CVE-2023-45355
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the webservice. This is also known as...
CVE-2023-45353
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting...
CVE-2023-45351
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039...
CVE-2023-45351
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039...
CVE-2023-45350
Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may lead to the ability of an authenticated attacker to run arbitrary code via AScm. This is also known as OSFOURK-24034...
PT-2023-29527 · Atos · Atos Unify Openscape Common Management Portal
Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Common Management Portal versions prior to V10 R4.17.0 Atos Unify OpenScape Common Management Portal versions prior to V10 R5.1.0 Description: The issue allows an authenticated attacker to execute arbitrary code on the...
PT-2023-29525 · Atos · Atos Unify Openscape 4000 Manager
Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Manager versions V10 R0 through V10 R1 before V10 R1.42.1 Description: The issue allows an authenticated attacker to potentially run arbitrary code via AScm, leading to privilege escalation. This may enable the...
CVE-2023-36618
Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...
CVE-2023-36618
Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...
