CVE-2023-30638
High
Description
Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands.
SeverityHigh
CVSS7.2
Exploit probability—
ProductAtos Unify Openscape Bcf
PublishedApr 14, 2023
First seenApr 14, 2023
Weakness typeCWE-94Code injection
How to fix
Update
- atos unify_openscape_bcf10r10.7.0 or later
- atos unify_openscape_branch10r3.1.2 or later
- atos unify_openscape_session_border_controller10r3.1.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atos unify_openscape_bcf | 10 ≤ v < 10r10.7.0 | 10r10.7.0 |
| atos unify_openscape_branch | 10 ≤ v < 10r3.1.2 | 10r3.1.2 |
| atos unify_openscape_session_border_controller | 10 ≤ v < 10r3.1.3 | 10r3.1.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.