What’s Vulnerable › Vulnerabilities

CVE-2022-46404

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-13 · updated 2026-06-17
• Weakness: CWE-77

Description

A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to the system.

Affected products

• Atos Unify Openscape 4000 Assistant: 8, 10
• Atos Unify Openscape 4000 Manager: 8, 10

References

• https://networks.unify.com/security/advisories/OBSO-2211-02.pdf
• https://www.heise.de/news/Kommunikationssoftware-Kritische-Sicherheitsluecke-in-Atos-Unify-OpenScape-4000-7358657.html
• https://networks.unify.com/security/advisories/OBSO-2211-02.pdf
• https://www.heise.de/news/Kommunikationssoftware-Kritische-Sicherheitsluecke-in-Atos-Unify-OpenScape-4000-7358657.html

Get alerted when CVE-2022-46404 or the next vulnerability affects your stack