CVE-2023-35034

Katalog CVE

CVSS 9.8 · Critical EPSS 1,3%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada atos unify openscape 4000 assistant, atos unify openscape 4000 manager. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033.

Rincian

Terbit di NVD

12 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://networks.unify.com/security/advisories/OBSO-2305-01.pdf advisory vendor
• https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-re... press/media coverage