CVE-2023-29475

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published: Apr 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-294769.1In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malformed client requests. T CVE-2023-294789.8BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on th CVE-2023-294795.3Ribose RNP before 0.16.3 may hang when the input is malformed.CVE-2023-29486.1Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1.CVE-2023-294807.5Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.CVE-2023-294837.0eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending CVE-2023-294846.5In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password.CVE-2023-294859.8An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass CVE-2023-294869.8An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions CVE-2023-294879.1An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cause CVE-2023-294896.1An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The CVE-2023-29496.1Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1.