What is the severity of CVE-2023-6269?

CVE-2023-6269 is classified as a high severity vulnerability due to the potential for argument injection in the affected products.

How do I fix CVE-2023-6269?

To fix CVE-2023-6269, upgrade to Atos Unify OpenScape products versions V10 R3.4.0 or later for SBC and Branch, and V10R10.12.00 or V10R11.05.02 for BCF.

Which products are affected by CVE-2023-6269?

CVE-2023-6269 affects Atos Unify OpenScape Session Border Controller, Branch, and BCF versions prior to the specified updates.

What type of vulnerability is CVE-2023-6269?

CVE-2023-6269 is an argument injection vulnerability that can lead to unauthorized access and manipulation of the system.

Can CVE-2023-6269 be exploited remotely?

Yes, CVE-2023-6269 can be exploited remotely through the administrative web interface of the affected products.

Vulnerability/
CVE-2023-6269

critical

CWE

EPSS

0.092%

5/12/2023

2/8/2024

CVE-2023-6269: Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch and Atos Unify OpenScape BCF

First published: Tue Dec 05 2023(Updated: )

An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticated attacker to gain root access to the appliance via SSH (scope change) and also bypass authentication for the administrative interface and gain access as an arbitrary (administrative) user.

Credit: 551230f0-3615-47bd-b7cc-93e92e730bbf

Affected Software	Affected Version	How to fix
Atos Unify OpenScape BCF	>=10<10r10.12.00
Atos Unify OpenScape Branch	>=10<10r3.4.0
Atos Unify Openscape Session Border Controller	>=10<10r3.4.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2023-6269?
CVE-2023-6269 is classified as a high severity vulnerability due to the potential for argument injection in the affected products.
How do I fix CVE-2023-6269?
To fix CVE-2023-6269, upgrade to Atos Unify OpenScape products versions V10 R3.4.0 or later for SBC and Branch, and V10R10.12.00 or V10R11.05.02 for BCF.
Which products are affected by CVE-2023-6269?
CVE-2023-6269 affects Atos Unify OpenScape Session Border Controller, Branch, and BCF versions prior to the specified updates.
What type of vulnerability is CVE-2023-6269?
CVE-2023-6269 is an argument injection vulnerability that can lead to unauthorized access and manipulation of the system.
Can CVE-2023-6269 be exploited remotely?
Yes, CVE-2023-6269 can be exploited remotely through the administrative web interface of the affected products.

collector/nvd-api
agent/event
agent/references
agent/type
agent/softwarecombine
agent/first-publish-date
agent/title
agent/weakness
agent/author
agent/severity
agent/description
collector/epss-latest
source/FIRST
agent/epss
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/tags
agent/source
vendor/atos
canonical/atos unify openscape bcf
version/atos unify openscape bcf/10
canonical/atos unify openscape branch
version/atos unify openscape branch/10
canonical/atos unify openscape session border controller
version/atos unify openscape session border controller/10

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.