CVE-2023-45349

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr. This is also known as OSFOURK-23722.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://networks.unify.com/security/advisories/OBSO-2306-01.pdf	Vendor Advisory
https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/	Press/Media Coverage
https://networks.unify.com/security/advisories/OBSO-2306-01.pdf	Vendor Advisory
https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/	Press/Media Coverage

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r0::::::
	cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1::::::
	cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1.42.0::::::
	cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0::::::
	cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1::::::
	cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1.42.0::::::

History

21 Nov 2024, 08:26

Type	Values Removed	Values Added
References	~~() https://networks.unify.com/security/advisories/OBSO-2306-01.pdf - Vendor Advisory~~	() https://networks.unify.com/security/advisories/OBSO-2306-01.pdf - Vendor Advisory
References	~~() https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - Press/Media Coverage~~	() https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - Press/Media Coverage

12 Oct 2023, 18:36

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
First Time		Atos unify Openscape 4000 Manager Atos Atos unify Openscape 4000 Assistant
CWE		NVD-CWE-noinfo
CPE		cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1.42.0:::::: cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:::::: cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1.42.0:::::: cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1:::::: cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r0:::::: cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1::::::
References	~~(MISC) https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ -~~	(MISC) https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - Press/Media Coverage
References	~~(MISC) https://networks.unify.com/security/advisories/OBSO-2306-01.pdf -~~	(MISC) https://networks.unify.com/security/advisories/OBSO-2306-01.pdf - Vendor Advisory

09 Oct 2023, 04:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-10-09 04:15

Updated : 2024-11-21 08:26

NVD link : CVE-2023-45349

Mitre link : CVE-2023-45349

CVE.ORG link : CVE-2023-45349

JSON object : View

Products Affected

atos

unify_openscape_4000_manager
unify_openscape_4000_assistant

CWE

NVD-CWE-noinfo

7.5 /10