CVE-2023-35034

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-35034
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://networks.unify.com/security/advisories/OBSO-2305-01.pdf Vendor Advisory
https://networks.unify.com/security/advisories/OBSO-2305-01.pdf Vendor Advisory
https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ Press/Media Coverage
https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ Press/Media Coverage
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1.34.4:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1.34.4:*:*:*:*:*:*
History

06 Jan 2025, 18:15

Type Values Removed Values Added
References (MISC) https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - Press/Media Coverage () https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - Press/Media Coverage
References (MISC) https://networks.unify.com/security/advisories/OBSO-2305-01.pdf - Vendor Advisory () https://networks.unify.com/security/advisories/OBSO-2305-01.pdf - Vendor Advisory

16 Jun 2023, 19:31

Type Values Removed Values Added
References (MISC) https://networks.unify.com/security/advisories/OBSO-2305-01.pdf - (MISC) https://networks.unify.com/security/advisories/OBSO-2305-01.pdf - Vendor Advisory
References (MISC) https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - (MISC) https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - Press/Media Coverage
CPE cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1.34.4:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1.34.4:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
First Time Atos unify Openscape 4000 Assistant
Atos
Atos unify Openscape 4000 Manager

12 Jun 2023, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-12 02:15

Updated : 2025-01-06 18:15

NVD link : CVE-2023-35034

Mitre link : CVE-2023-35034

JSON object : View

Products Affected

atos

  • unify_openscape_4000_assistant
  • unify_openscape_4000_manager
CWE
NVD-CWE-noinfo