What’s Vulnerable › Vulnerabilities

CVE-2023-29473

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-04-06 · updated 2026-06-17
• Weakness: CWE-77

Description

webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.

Affected products

• Atos Unify Openscape 4000: 10-r1
• Atos Unify Openscape 4000 Manager: 10-r1

References

• https://networks.unify.com/security/advisories/OBSO-2303-01.pdf
• https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/
• https://networks.unify.com/security/advisories/OBSO-2303-01.pdf
• https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/

Get alerted when CVE-2023-29473 or the next vulnerability affects your stack