CVE-2023-35035

HIGH 8.8CVE-2023-35035 · Published 12/06/2023 · updated 17/06/2026

In short

CVE-2023-35035 is a HIGH (CVSS 8.8) vulnerability affecting unify openscape 4000 assistant (atos), unify openscape 4000 manager (atos).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unify openscape 4000 assistant atos	`= 10`	No fix yet
unify openscape 4000 manager atos	`= 10`	No fix yet

Description

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557.

References

networks.unify.com/security/advisories/OBSO-2305-01.pdf · Vendor Advisory
news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1 · Press/Media Coverage

More vulnerabilities in unify openscape 4000 assistant

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2023-35035 is a HIGH (CVSS 8.8) vulnerability affecting unify openscape 4000 assistant (atos), unify openscape 4000 manager (atos).

Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.3% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

unify openscape 4000 assistant

atos

= 10

No fix yet

unify openscape 4000 manager

atos

= 10

No fix yet

More vulnerabilities in unify openscape 4000 assistant

See all →