Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2023-6269

Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch and Atos Unify OpenScape BCF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SEC-VLab

Description

An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticated attacker to gain root access to the appliance via SSH (scope change) and also bypass authentication for the administrative interface and gain access as an arbitrary (administrative) user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Atos Unify OpenScape Session Border Controller (SBC)

Default version status: unaffected

  • 0 to < V10 R3.4.0affected

Atos Unify OpenScape Branch

Default version status: unaffected

  • 0 to < V10 R3.4.0affected

Atos Unify OpenScape BCF

Default version status: unaffected

  • 0 to < V10 R10.12.00affected
  • 0 to < V10R 11.05.02affected

References