CVE-2023-35032: Command Injection

Published Jun 12, 2023

Updated

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554.

Affected Software

4 affected components

Atos Unify OpenScape 4000 Assistant=10-r1

Atos Unify OpenScape 4000 Assistant=10-r1.34.4

Atos Unify OpenScape 4000 Manager=10-r1

Atos Unify OpenScape 4000 Manager=10-r1.34.4

Event History

Jun 12, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-35032?

CVE-2023-35032 is a vulnerability in Atos Unify OpenScape 4000 Assistant and Manager that allows authenticated users to execute arbitrary commands.

What is the severity of CVE-2023-35032?

CVE-2023-35032 has a severity of 8.8 (High).

Which software versions are affected by CVE-2023-35032?

CVE-2023-35032 affects Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, as well as Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8.

How can the CVE-2023-35032 vulnerability be exploited?

The CVE-2023-35032 vulnerability can be exploited by authenticated users through command injection.

Where can I find more information about CVE-2023-35032?

More information about CVE-2023-35032 can be found at the following references: [1] [2].