CVE-2023-29473
Last modified
CVE-2023-29473 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.. EPSS estimates a 0.84% chance of exploitation in the next 30 days.
Description
webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Atos | Unify Openscape 4000 | 10 | R1 |
| Atos | Unify Openscape 4000 Manager | 10 | R1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-29473?
How severe is CVE-2023-29473?
How do I fix CVE-2023-29473?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-29464 FactoryTalk Linx, in the Rockwell Automation PanelView Plus…9.1
- CVE-2023-29465SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typic…5.5
- CVE-2023-29468The Texas Instruments (TI) WiLink WL18xx MCP driver does not…9.8
- CVE-2023-29469An issue was discovered in libxml2 before 2.10.4. When hashi…6.5
- CVE-2023-2947Cross-site Scripting (XSS) - Stored in GitHub repository ope…4.8
- CVE-2023-29471Lightbend Alpakka Kafka before 5.0.0 logs its configuration …5.5
- CVE-2023-29474inventory in Atos Unify OpenScape 4000 Platform and OpenScap…9.8
- CVE-2023-29475inventory in Atos Unify OpenScape 4000 Platform and OpenScap…9.8
- CVE-2023-29476In Menlo On-Premise Appliance before 2.88, web policy may no…9.1
- CVE-2023-29478BiblioCraft before 2.4.6 does not sanitize path-traversal ch…9.8
- CVE-2023-29479Ribose RNP before 0.16.3 may hang when the input is malforme…5.3
- CVE-2023-2948Cross-site Scripting (XSS) - Generic in GitHub repository op…6.1
Are you affected by CVE-2023-29473?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST