CVE-2023-35033
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.
Risk Assessment
An attacker could exploit this vulnerability to execute unauthorized commands, potentially leading to serious security breaches.
Recommendation
It is recommended to update to the latest software versions to mitigate this vulnerability and to monitor the system for potential attack attempts.
Other vulnerabilities in Atos Unify OpenScape 4000 Assistant i Manager
See all- CVE-2023-35034Critical
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users.
- CVE-2023-35035High
Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.
- CVE-2023-35032High
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users.
- CVE-2023-35031High
Atos Unify OpenScape 4000 Assistant and Manager systems are vulnerable to command injection affecting versions prior to V10 R1.42.0 and V10 R1.34.8. This allows authenticated users to execute unauthorized commands.
Original NVD description (English source)
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23556.