CVE-2023-40265: Malicious File Upload
Published Feb 8, 2024
·Updated
An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution via file upload.
Affected Software
1 affected component
Mitel Unify Openscape Xpressions Webassistant>=7.0<7r1_fr5_hf42_p911
Event History
Feb 8, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-40265?
CVE-2023-40265 has a high severity due to its potential for authenticated remote code execution.
2
How do I fix CVE-2023-40265?
To fix CVE-2023-40265, upgrade to Atos Unify OpenScape Xpressions WebAssistant version 7R1 FR5 HF42 P911 or later.
3
What are the potential impacts of CVE-2023-40265?
The impact of CVE-2023-40265 includes unauthorized remote code execution, which can compromise the affected system.
4
Who is affected by CVE-2023-40265?
CVE-2023-40265 affects users of Atos Unify OpenScape Xpressions WebAssistant versions prior to 7R1 FR5 HF42 P911.
5
Is CVE-2023-40265 exploitable without authentication?
CVE-2023-40265 is not exploitable without authentication, as it requires an authenticated user to execute the code.