CVE-2023-40263: Command Injection
Published Feb 8, 2024
·Updated
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated command injection via ftp.
Affected Software
1 affected component
Unify OpenScape Voice Trace Manager=8.0
Event History
Feb 8, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-40263?
CVE-2023-40263 is classified as a high severity vulnerability due to the potential for command injection.
2
How do I fix CVE-2023-40263?
To remediate CVE-2023-40263, it is recommended to upgrade to Unify OpenScape Voice Trace Manager V8 R0.9.11 or later.
3
Who is affected by CVE-2023-40263?
CVE-2023-40263 affects all versions of Unify OpenScape Voice Trace Manager V8 prior to R0.9.11.
4
What type of vulnerability is CVE-2023-40263?
CVE-2023-40263 is a command injection vulnerability that can be exploited by authenticated users.
5
Can CVE-2023-40263 be exploited remotely?
CVE-2023-40263 requires authentication, meaning that an attacker would need valid credentials to exploit the vulnerability.