CVE-2023-45355

Name of the Vulnerable Software and Affected Versions Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 Atos Unify OpenScape 4000 Manager Platform V10 R1 before Hotfix V10 R1.42.2

Description The issue is related to insufficient input data validation in the webservice of the Atos Unify OpenScape 4000 Platform and the Atos Unify OpenScape 4000 Manager Platform, allowing command injection by an authenticated attacker into the platform operating system. This can lead to administrative access via the webservice. The exploitation of this issue may allow a remote attacker to execute arbitrary commands.

Recommendations For Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2, apply Hotfix V10 R1.42.2 to resolve the issue. For Atos Unify OpenScape 4000 Manager Platform V10 R1 before Hotfix V10 R1.42.2, apply Hotfix V10 R1.42.2 to resolve the issue. As a temporary workaround, consider restricting access to the webservice to minimize the risk of exploitation.