CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

CVE-2023-36619

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

Design/Logic Flaw

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

Input validation

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

CVE-2023-36619

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

CVE-2023-36619

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

CVE-2023-36619

Concrete vulnerability CVE-2023-36619 affects Atos Unify OpenScape SBC (Session Border Controller) up to and including version V10 R3.01.03, with root cause described as insufficient input validation in the API that lets unauthenticated attackers execute administrative scripts remotely. Related S...

CVE-2023-36618

CVE-2023-36618 affects Atos Unify OpenScape Session Border Controller (SBC) through OpenScape V10 R3.01.03, where low-privileged authenticated users can execute OS commands as root due to an authentication deficiency. The issue is documented across multiple sources (Red Hat, NVD, CVE list) and is...

CVE-2023-36618

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...

Atos Unify OpenScape Input Validation Error Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. An input validation error vulnerability exists in Atos Unify OpenScape. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Atos Unify OpenScape Operating System Command Injection Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. An operating system command injection vulnerability exists in Atos Unify OpenScape. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or vendor announcements...

Atos Unify OpenScape Code Execution / Missing Authentication

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authenticated Remote Code Execution and Missing Authentication product: Atos Unify OpenScape Session Border Controller Atos Unify OpenScape Branch Atos Unify OpenScape BC...

PT-2023-5420 · Atos · Atos Unify Openscape Branch +2

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Session Border Controller versions through V10 R3.01.03 Atos Unify OpenScape Branch affected versions not specified Atos Unify OpenScape BCF affected versions not specified Description: The issue allows execution of OS...

Atos Unify OpenScape Code Execution / Missing Authentication Vulnerabilities

Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch, and Atos Unify OpenScape BCF suffer from remote code execution and missing authentication vulnerabilities. Atos OpenScape SBC versions before 10 R3.3.0, Branch version 10 versions before R3.3.0, and BCF version 10 versio...

PT-2023-5906 · Atos · Atos Unify Openscape 4000 Platform +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 Atos Unify OpenScape 4000 Manager Platform V10 R1 before Hotfix V10 R1.42.2 Description: The issue is related to insufficient input data validation in the webservice of the...

PT-2023-5905 · Atos · Atos Unify Openscape 4000 Platform +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 Atos Unify OpenScape 4000 Manager Platform V10 R1 before Hotfix V10 R1.42.2 Description: The issue is related to insufficient input data cleaning when processing dtb...

ILIAS eLearning Platform XSS / Remote Code Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple high risk vulnerabilities product: ILIAS eLearning platform vulnerable version: see section "Vulnerable version" below fixed version: see section "Solution" belo...