CVE-2022-36444
High
Description
An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker (with network access to the admin interface) to disrupt system availability or potentially compromise the confidentiality and integrity of the system.
SeverityHigh
CVSS8.6
Exploit probability—
ProductAtos Unify Openscape Bcf
PublishedJul 25, 2022
First seenJul 25, 2022
How to fix
Update
- atos unify_openscape_bcf10r9.12.1 or later
- atos unify_openscape_branch10r2.1.1 or later
- atos unify_openscape_session_border_controller10r2.2.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atos unify_openscape_bcf | 10 ≤ v < 10r9.12.1 | 10r9.12.1 |
| atos unify_openscape_branch | 10 ≤ v < 10r2.1.1, 9 | 10r2.1.1 |
| atos unify_openscape_session_border_controller | 10 ≤ v < 10r2.2.1, 9 | 10r2.2.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.