CVE-2023-30638

· HIGHModified

← All CVEs

CVSS v3.1

7.2

EPSS

0.96%

Published

Apr 13, 2023

Modified

Feb 7, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-77CWE-94

Affected Products (3)

atos · unify_openscape_bcf (up to 10r10.7.0)vulnerable

atos · unify_openscape_branch (up to 10r3.1.2)vulnerable

atos · unify_openscape_session_border_controller (up to 10r3.1.3)vulnerable

References (4)

https://networks.unify.com/security/advisories/OBSO-2303-02.pdf

Vendor Advisory

https://www.news.de/technik/856818957/unify-openscape-sbc-und-openscape-branch-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/

Press/Media CoverageThird Party Advisory

https://networks.unify.com/security/advisories/OBSO-2303-02.pdf

Vendor Advisory

https://www.news.de/technik/856818957/unify-openscape-sbc-und-openscape-branch-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/

Press/Media CoverageThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs