CVE-2023-40265
High
Description
An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution via file upload.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Mitel Unify Openscape Xpressions Webassistant
PublishedFeb 8, 2024
First seenFeb 8, 2024
Weakness typeCWE-434Unrestricted upload of dangerous file type
How to fix
Update
- mitel unify_openscape_xpressions_webassistant7r1_fr5_hf42_p911 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitel unify_openscape_xpressions_webassistant | 7.0 ≤ v < 7r1_fr5_hf42_p911 | 7r1_fr5_hf42_p911 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.