CVE-2022-46404

A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to the system.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://networks.unify.com/security/advisories/OBSO-2211-02.pdf	Mitigation Vendor Advisory
https://www.heise.de/news/Kommunikationssoftware-Kritische-Sicherheitsluecke-in-Atos-Unify-OpenScape-4000-7358657.html	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:atos:unify_openscape_4000_assistant:8:-::::::
	cpe:2.3:a:atos:unify_openscape_4000_assistant:10:-::::::
	cpe:2.3:a:atos:unify_openscape_4000_manager:8:-::::::
	cpe:2.3:a:atos:unify_openscape_4000_manager:10:-::::::

History

No history.

Information

Published : 2022-12-13 21:15

Updated : 2022-12-27 16:12

NVD link : CVE-2022-46404

Mitre link : CVE-2022-46404

CVE.ORG link : CVE-2022-46404

JSON object : View

Products Affected

atos

unify_openscape_4000_manager
unify_openscape_4000_assistant

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2022-46404", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-12-13T21:15:11.800", "references": [{"url": "https://networks.unify.com/security/advisories/OBSO-2211-02.pdf", "tags": ["Mitigation", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.heise.de/news/Kommunikationssoftware-Kritische-Sicherheitsluecke-in-Atos-Unify-OpenScape-4000-7358657.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to the system."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad de inyecci\u00f3n de comandos en Atos Unify OpenScape 4000 Assistant y Unify OpenScape 4000 Manager (8 anteriores a R2.22.18, 10 anteriores a 0.28.13 y 10 R1 anteriores a R1.34.4) que puede permitir que un atacante no autenticado cargue archivos arbitrarios y lograr acceso administrativo al sistema."}], "lastModified": "2022-12-27T16:12:32.677", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:atos:unify_openscape_4000_assistant:8:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54BA8194-E093-470B-81F3-1866654EDF2B"}, {"criteria": "cpe:2.3:a:atos:unify_openscape_4000_assistant:10:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94004B7D-71FF-4323-BAA7-A0A86CBE1FAD"}, {"criteria": "cpe:2.3:a:atos:unify_openscape_4000_manager:8:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4AFCA4A-E620-418E-98FF-91A8BD519F0F"}, {"criteria": "cpe:2.3:a:atos:unify_openscape_4000_manager:10:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB025DB6-3035-4BCD-A39B-49E27D74F543"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}