CVE-2023-29473
Summary
| CVE | CVE-2023-29473 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-04-06 23:15:00 UTC |
| Updated | 2023-04-13 18:03:00 UTC |
| Description | webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710. |
Risk And Classification
Problem Types: CWE-77
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Atos | Unify Openscape 4000 | 10 | r1 | All | All |
| Application | Atos | Unify Openscape 4000 Manager | 10 | r1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Unify OpenScape 4000: IT-Sicherheitslücke mit hohem Risiko! Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten | news.de | MISC | www.news.de | |
| networks.unify.com/security/advisories/OBSO-2303-01.pdf | MISC | networks.unify.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.