CVE-2023-29473

State: Published
Severity: 9.8 Critical
Published: Apr 6, 2023
Updated: Feb 12, 2025
Reserved: Apr 6, 2023

Description

webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N	mitre

Weaknesses

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://networks.unify.com/security/advisories/OBSO-2303-01.pdf
https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.