CVE-2023-35031: Command Injection
First published: Mon Jun 12 2023(Updated: )
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-24036.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Atos Unify OpenScape 4000 Assistant | =10-r0 | |
| Atos Unify OpenScape 4000 Assistant | =10-r1 | |
| Atos Unify OpenScape 4000 Assistant | =10-r1.34.4 | |
| Mitel OpenScape 4000 Manager | =10-r0 | |
| Mitel OpenScape 4000 Manager | =10-r1 | |
| Mitel OpenScape 4000 Manager | =10-r1.34.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-35031.
What is the affected software of this vulnerability?
The affected software of this vulnerability includes Atos Unify OpenScape 4000 Assistant V10 R0, V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Atos Unify OpenScape 4000 Manager V10 R0, V10 R1 before V10 R1.42.0 and V10 R1.34.8.
What is the severity of CVE-2023-35031?
The severity of CVE-2023-35031 is high, with a severity value of 8.8.
How does CVE-2023-35031 allow command injection?
CVE-2023-35031 allows command injection by authenticated users.
Where can I find more information about CVE-2023-35031?
You can find more information about CVE-2023-35031 at the following references: [Reference 1](https://networks.unify.com/security/advisories/OBSO-2305-01.pdf) and [Reference 2](https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/).
- agent/references
- agent/type
- agent/softwarecombine
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/atos
- canonical/atos unify openscape 4000 assistant
- version/atos unify openscape 4000 assistant/10-r0
- version/atos unify openscape 4000 assistant/10-r1
- version/atos unify openscape 4000 assistant/10-r1.34.4
- canonical/mitel openscape 4000 manager
- version/mitel openscape 4000 manager/10-r0
- version/mitel openscape 4000 manager/10-r1
- version/mitel openscape 4000 manager/10-r1.34.4