CVE-2023-6269

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 5, 2023
Updated: Dec 13, 2023
CWE ID 88

Summary

CVE-2023-6269 is a newly identified vulnerability affecting the administrative web interface of Atos Unify OpenScape products, specifically the Session Border Controller (SBC) and Branch, as well as the BCF, before certain versions. This issue involves an argument injection flaw that enables unauthenticated attackers to gain root access via SSH by performing a scope change. Additionally, attackers can bypass authentication and obtain administrative access as an arbitrary user for the administrative interface.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share