First published: Mon Jun 12 2023(Updated: )
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Atos Unify OpenScape 4000 Assistant | =10-r1 | |
Atos Unify OpenScape 4000 Assistant | =10-r1.34.4 | |
Mitel OpenScape 4000 Manager | =10-r1 | |
Mitel OpenScape 4000 Manager | =10-r1.34.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-35032 is a vulnerability in Atos Unify OpenScape 4000 Assistant and Manager that allows authenticated users to execute arbitrary commands.
CVE-2023-35032 has a severity of 8.8 (High).
CVE-2023-35032 affects Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, as well as Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8.
The CVE-2023-35032 vulnerability can be exploited by authenticated users through command injection.
More information about CVE-2023-35032 can be found at the following references: [1] [2].