CVSS: 9.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-45356
https://notcve.org/view.php?id=CVE-2023-45356
09 Oct 2023 — Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pages of the platform portal. This is also known as OSFOURK-23719. Atos Unify OpenScape 4000 Platform V10 R1 antes del Hotfix V10 R1.42.2 4000 y Manager Platform V10 R1 antes del Hotfix V10 R1.42.2 permiten la inyección de comandos por parte de un atacan... • https://networks.unify.com/security/advisories/OBSO-2308-02.pdf • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0CVE-2023-45349
https://notcve.org/view.php?id=CVE-2023-45349
09 Oct 2023 — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr. This is also known as OSFOURK-23722. Atos Unify OpenScape 4000 Assistant V10 R1 antes de V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 antes de V10 R1.34.7, 4000 Manager V10 R1.... • https://networks.unify.com/security/advisories/OBSO-2306-01.pdf •
CVSS: 9.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-45355
https://notcve.org/view.php?id=CVE-2023-45355
09 Oct 2023 — Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the webservice. This is also known as OSFOURK-24120. Atos Unify OpenScape 4000 Platform V10 R1 antes del Hotfix V10 R1.42.2 y 4000 y Manager Platform V10 R1 antes del Hotfix V10 R1.42.2 permiten la inyección de comandos por parte de un atacante autenticad... • https://networks.unify.com/security/advisories/OBSO-2308-02.pdf • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 4EXPL: 0CVE-2023-45351
https://notcve.org/view.php?id=CVE-2023-45351
09 Oct 2023 — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039. Atos Unify OpenScape 4000 Assistant V10 R1 anterior a V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 anterior a V10 R1.42.1 y 4000 Manager V10 R0 permiten la inyección de comandos autenticados a través de AShbr. Esto también se conoce como OSFOURK-24039. • https://networks.unify.com/security/advisories/OBSO-2306-01.pdf • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 10.0EPSS: 1%CPEs: 4EXPL: 0CVE-2023-35034
https://notcve.org/view.php?id=CVE-2023-35034
12 Jun 2023 — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033. • https://networks.unify.com/security/advisories/OBSO-2305-01.pdf • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.0EPSS: 0%CPEs: 6EXPL: 0CVE-2023-35035
https://notcve.org/view.php?id=CVE-2023-35035
12 Jun 2023 — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557. • https://networks.unify.com/security/advisories/OBSO-2305-01.pdf • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 6EXPL: 0CVE-2023-35031
https://notcve.org/view.php?id=CVE-2023-35031
12 Jun 2023 — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-24036. • https://networks.unify.com/security/advisories/OBSO-2305-01.pdf • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 6EXPL: 0CVE-2023-35033
https://notcve.org/view.php?id=CVE-2023-35033
12 Jun 2023 — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23556. • https://networks.unify.com/security/advisories/OBSO-2305-01.pdf • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.0EPSS: 0%CPEs: 4EXPL: 0CVE-2023-35032
https://notcve.org/view.php?id=CVE-2023-35032
12 Jun 2023 — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554. • https://networks.unify.com/security/advisories/OBSO-2305-01.pdf • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2022-46404
https://notcve.org/view.php?id=CVE-2022-46404
13 Dec 2022 — A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to the system. Se ha identificado una vulnerabilidad de inyección de comandos en Atos Unify OpenScape 4000 Assistant y Unify OpenScape 4000 Manager (8 anteriores a R2.22.18, 10 anteriores a 0.28.13 y 10 R1 anteriores a... • https://networks.unify.com/security/advisories/OBSO-2211-02.pdf • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •