CVE-2023-35034
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users.
Risk Assessment
This vulnerability poses a serious risk to organizations by allowing attackers to execute code remotely, potentially leading to system takeover.
Recommendation
It is recommended to upgrade to version V10 R1.42.0 or V10 R1.34.8 to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Atos Unify OpenScape 4000 Assistant i Manager
See all- CVE-2023-35035High
Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.
- CVE-2023-35033High
Atos Unify OpenScape 4000 Assistant and Manager systems before versions V10 R1.42.0 and V10 R1.34.8 are vulnerable to command injection by authenticated users.
- CVE-2023-35032High
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users.
- CVE-2023-35031High
Atos Unify OpenScape 4000 Assistant and Manager systems are vulnerable to command injection affecting versions prior to V10 R1.42.0 and V10 R1.34.8. This allows authenticated users to execute unauthorized commands.
Original NVD description (English source)
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033.