Unrated severityNVD Advisory· Published Oct 9, 2023· Updated Sep 19, 2024

CVE-2023-45353

Description

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting the underlying operating system. This is also known as OCMP-6591.

Affected products

Atos Unify/OpenScape Common Management Portaldescription
Atos Unify/OpenScape Common Management Portalllm-fuzzy
Range: >= V10 < V10 R4.17.0, >= V10 R5.0.0 < V10 R5.1.0

Patches

Vulnerability mechanics

References

networks.unify.com/security/advisories/OBSO-2306-02.pdfmitre
www.news.de/technik/857003738/unify-openscape-common-management-platform-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-update-zu-bekannten-schwachstellen-und-sicherheitsluecken-vom-03-07-2023/1/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000