Executive Summary

Informations
Name CVE-2023-6269 First vendor Publication 2023-12-05
Vendor Cve Last vendor Modification 2023-12-13

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score 9.8
Base Score 9.8 Environmental Score 9.8
impact SubScore 5.9 Temporal Score 9.8
Exploitabality Sub Score 3.9
 
Attack Vector Network Attack Complexity Low
Privileges Required None User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticated attacker to gain root access to the appliance via SSH (scope change) and also bypass authentication for the administrative interface and gain
access as an arbitrary (administrative) user.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6269

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-88 Argument Injection or Modification

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Application 2
Application 2

Sources (Detail)

http://packetstormsecurity.com/files/176194/Atos-Unify-OpenScape-Authenticati...
http://seclists.org/fulldisclosure/2023/Dec/16
https://networks.unify.com/security/advisories/OBSO-2310-01.pdf
https://r.sec-consult.com/unifyroot
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
Date Informations
2023-12-14 02:36:37
  • Multiple Updates
2023-12-14 02:36:02
  • Multiple Updates
2023-12-13 21:28:01
  • Multiple Updates
2023-12-13 09:27:36
  • Multiple Updates
2023-12-11 21:27:33
  • Multiple Updates
2023-12-05 17:27:22
  • Multiple Updates
2023-12-05 13:27:24
  • First insertion