CVE-2023-45351

HIGH 8.8CVE-2023-45351 · Published 09/10/2023 · updated 17/06/2026

In short

CVE-2023-45351 is a HIGH (CVSS 8.8) vulnerability affecting unify openscape 4000 assistant (atos), unify openscape 4000 manager (atos).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unify openscape 4000 assistant atos	`= 10`	No fix yet
unify openscape 4000 manager atos	`= 10`	No fix yet

Description

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039.

References

networks.unify.com/security/advisories/OBSO-2306-01.pdf · Vendor Advisory
news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1 · Press/Media Coverage

More vulnerabilities in unify openscape 4000 assistant

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2023-45351 is a HIGH (CVSS 8.8) vulnerability affecting unify openscape 4000 assistant (atos), unify openscape 4000 manager (atos).

Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.2% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

unify openscape 4000 assistant

atos

= 10

No fix yet

unify openscape 4000 manager

atos

= 10

No fix yet

More vulnerabilities in unify openscape 4000 assistant

See all →