CVE-2023-45353: Malicious File Upload

Published Oct 9, 2023

Updated

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting the underlying operating system. This is also known as OCMP-6591.

Affected Software

1 affected component

Atos Unify OpenScape Common Management=10

Event History

Oct 9, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-45353?

The severity of CVE-2023-45353 is high.

How does CVE-2023-45353 impact Atos Unify OpenScape Common Management Portal?

CVE-2023-45353 allows an authenticated attacker to execute arbitrary code on the operating system through the Common Management Portal web interface.

How can an attacker exploit CVE-2023-45353?

An attacker can exploit CVE-2023-45353 by leveraging the Common Management Portal web interface for authenticated remote upload and creation of arbitrary files.

What is the recommended version of Atos Unify OpenScape Common Management Portal to address CVE-2023-45353?

To address CVE-2023-45353, it is recommended to update to V10 R4.17.0 or V10 R5.1.0 of Atos Unify OpenScape Common Management Portal.

Where can I find more information about CVE-2023-45353?

You can find more information about CVE-2023-45353 in the provided references: [link1], [link2].