CVE-2023-6269: Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch and Atos Unify OpenScape BCF
An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticated attacker to gain root access to the appliance via SSH (scope change) and also bypass authentication for the administrative interface and gain access as an arbitrary (administrative) user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6269?
CVE-2023-6269 is classified as a high severity vulnerability due to the potential for argument injection in the affected products.
How do I fix CVE-2023-6269?
To fix CVE-2023-6269, upgrade to Atos Unify OpenScape products versions V10 R3.4.0 or later for SBC and Branch, and V10R10.12.00 or V10R11.05.02 for BCF.
Which products are affected by CVE-2023-6269?
CVE-2023-6269 affects Atos Unify OpenScape Session Border Controller, Branch, and BCF versions prior to the specified updates.
What type of vulnerability is CVE-2023-6269?
CVE-2023-6269 is an argument injection vulnerability that can lead to unauthorized access and manipulation of the system.
Can CVE-2023-6269 be exploited remotely?
Yes, CVE-2023-6269 can be exploited remotely through the administrative web interface of the affected products.