CVE-2023-48166

ALTO 7.5CVE-2023-48166 · Published 12/01/2024 · updated 17/06/2026

In breve

CVE-2023-48166 è una vulnerabilità ALTO (CVSS 7.5) che riguarda openscape voice (unify).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.0%, superiore al 62.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
openscape voice unify	`= 10.0`	No fix yet

Description

A directory traversal vulnerability in the SOAP Server integrated in Atos Unify OpenScape Voice V10 before V10R3.26.1 allows a remote attacker to view the contents of arbitrary files in the local file system. An unauthenticated attacker might obtain sensitive files that allow for the compromise of the underlying system.

References

labs.integrity.pt/advisories/cve-2023-48166 · Third Party Advisory
networks.unify.com/security/advisories/OBSO-2401-01.pdf · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free