CVE-2023-30638 - Vulnerability Details - OpenCVE

ReportizFlow

Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Atos	Unify Openscape Bcf Unify Openscape Branch Unify Openscape Session Border Controller

Configuration 1 [-]

OR	cpe:2.3:a:atos:unify_openscape_bcf::::::::
	cpe:2.3:a:atos:unify_openscape_branch::::::::
	cpe:2.3:a:atos:unify_openscape_session_border_controller::::::::

No data.

References

Link	Providers
https://networks.unify.com/security/advisories/OBSO-2303-02.pdf
https://www.news.de/technik/856818957/unify-openscape-sbc-und-openscape-branch-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-04-13T00:00:00

Updated: 2024-08-02T14:28:52.038Z

Reserved: 2023-04-13T00:00:00

Link: CVE-2023-30638

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-04-14T00:15:18.190

Modified: 2024-11-21T08:00:34.640

Link: CVE-2023-30638

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:atos:unify_openscape_bcf:*:*:*:*:*:*:*:*", "matchCriteriaId": "860FB40B-EFA9-4231-86A4-3E04DBCF0B21", "versionEndExcluding": "10r10.7.0", "versionStartIncluding": "10", "vulnerable": true}, {"criteria": "cpe:2.3:a:atos:unify_openscape_branch:*:*:*:*:*:*:*:*", "matchCriteriaId": "2933BF75-7C65-49AB-A903-888B7DEE8DDC", "versionEndExcluding": "10r3.1.2", "versionStartIncluding": "10", "vulnerable": true}, {"criteria": "cpe:2.3:a:atos:unify_openscape_session_border_controller:*:*:*:*:*:*:*:*", "matchCriteriaId": "64637558-A00A-40D0-BDF7-A7EC84F91ED1", "versionEndExcluding": "10r3.1.3", "versionStartIncluding": "10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands."}], "id": "CVE-2023-30638", "lastModified": "2024-11-21T08:00:34.640", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-04-14T00:15:18.190", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://networks.unify.com/security/advisories/OBSO-2303-02.pdf"}, {"source": "[email protected]", "tags": ["Press/Media Coverage", "Third Party Advisory"], "url": "https://www.news.de/technik/856818957/unify-openscape-sbc-und-openscape-branch-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://networks.unify.com/security/advisories/OBSO-2303-02.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Press/Media Coverage", "Third Party Advisory"], "url": "https://www.news.de/technik/856818957/unify-openscape-sbc-und-openscape-branch-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "[email protected]", "type": "Primary"}]}