CVE-2023-35031
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
Atos Unify OpenScape 4000 Assistant and Manager systems are vulnerable to command injection affecting versions prior to V10 R1.42.0 and V10 R1.34.8. This allows authenticated users to execute unauthorized commands.
Risk Assessment
This vulnerability could lead to serious security breaches, allowing attackers to gain access to the system and potentially take control of it. Organizations should be aware of the risks associated with using outdated software versions.
Recommendation
It is recommended to update Atos Unify OpenScape 4000 Assistant and Manager systems to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Atos Unify OpenScape 4000 Assistant i Manager
See all- CVE-2023-35034Critical
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users.
- CVE-2023-35035High
Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.
- CVE-2023-35033High
Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.
- CVE-2023-35032High
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users.
Original NVD description (English source)
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-24036.