CVE-2023-35035: Command Injection
Published Jun 12, 2023
·Updated
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557.
Affected Software
6 affected components
Atos Unify OpenScape 4000 Assistant=10-r0
Atos Unify OpenScape 4000 Assistant=10-r1
Atos Unify OpenScape 4000 Assistant=10-r1.34.4
Atos Unify OpenScape 4000 Manager=10-r0
Atos Unify OpenScape 4000 Manager=10-r1
Atos Unify OpenScape 4000 Manager=10-r1.34.4
Event History
Jun 12, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this Atos Unify OpenScape 4000 Assistant and Manager vulnerability?
The vulnerability ID is CVE-2023-35035.
2
What is the severity of CVE-2023-35035?
The severity of CVE-2023-35035 is high.
3
How does CVE-2023-35035 allow command injection?
CVE-2023-35035 allows command injection by authenticated users.
4
Which versions of Atos Unify OpenScape 4000 Assistant are affected?
Atos Unify OpenScape 4000 Assistant versions 10-r0, 10-r1, and 10-r1.34.4 are affected.
5
Which versions of Atos Unify OpenScape 4000 Manager are affected?
Atos Unify OpenScape 4000 Manager versions 10-r0, 10-r1, and 10-r1.34.4 are affected.
6
How can I fix CVE-2023-35035?
To fix CVE-2023-35035, update Atos Unify OpenScape 4000 Assistant and Manager to version V10 R1.42.0 or V10 R1.34.8.