CVE-2023-45355
Published: 09 October 2023
Summary
CVE-2023-45355 is a high-severity Command Injection (CWE-77) vulnerability in Atos Unify Openscape 4000 Assistant. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 25.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-49648
Vulnerability details
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the…
more
webservice. This is also known as OSFOURK-24120.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.