CVE-2023-35032
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users.
Risk Assessment
This vulnerability may lead to unauthorized command execution in the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest version of the software to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Atos Unify OpenScape 4000 Assistant i Manager
See all- CVE-2023-35034Critical
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users.
- CVE-2023-35035High
Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.
- CVE-2023-35033High
Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.
- CVE-2023-35031High
Atos Unify OpenScape 4000 Assistant and Manager systems are vulnerable to command injection affecting versions prior to V10 R1.42.0 and V10 R1.34.8. This allows authenticated users to execute unauthorized commands.
Original NVD description (English source)
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554.