CVE-2023-45351

HIGH

Atos Unify OpenScape 4000 Assistant V10 R1 < V10 R1.42.1 and V10 R0 - Authenticated Command Injection via AShbr

Title source: llm

Description

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039.

References (2)

Core 2

Core References

Vendor Advisory

https://networks.unify.com/security/advisories/OBSO-2306-01.pdf

Press/Media Coverage

https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/

Scores

CVSS v3 8.8

EPSS 0.0126

EPSS Percentile 66.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-77

Status published

Products (2)

atos/unify_openscape_4000_assistant 10 r0 (2 CPE variants)

atos/unify_openscape_4000_manager 10 r0 (2 CPE variants)

Published Oct 09, 2023

Tracked Since Feb 18, 2026