CVSS 3.1
7.2 highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2023-30638
High (7.2) in atos. EPSS 1.0% chance of exploitation in the next 30 days.
Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-77, CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- atos:unify_openscape_bcf
- atos:unify_openscape_branch
- atos:unify_openscape_session_border_controller
References
- https://networks.unify.com/security/advisories/OBSO-2303-02.pdf
- https://www.news.de/technik/856818957/unify-openscape-sbc-und-openscape-branch-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/
- https://networks.unify.com/security/advisories/OBSO-2303-02.pdf
- https://www.news.de/technik/856818957/unify-openscape-sbc-und-openscape-branch-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/