CVE-2023-36619

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users

published October 4, 2023

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

🚨 Unauthenticated users can execute administrative scripts on Atos Unify OpenScape Session Border Controller, and that’s a security hole worth a double-take! Think of it like a restaurant where anyone can waltz into the kitchen and start cooking whatever they want, no questions asked—a recipe for chaos! 🍽️ This vulnerability opens the door for malicious actors to change configurations, access sensitive information, or even disrupt communications. If a bad actor takes advantage of this flaw, it could lead to serious downtime or data breaches—absolutely devastating!

Put simply

Think of it like a restaurant where anyone can waltz into the kitchen and start cooking whatever they want, no questions asked—a recipe for chaos! 🍽️ CVE-2023-36619 allows unauthenticated users to run arbitrary administrative scripts on the OpenScape Session Border Controller, which should only be accessible to trusted users. This is due to a lack of proper authentication checks in the administrative interface.

What to do

This vulnerability opens the door for malicious actors to change configurations, access sensitive information, or even disrupt communications. If a bad actor takes advantage of this flaw, it could lead to serious downtime or data breaches—absolutely devastating! To secure your deployment, ensure you upgrade to the latest version of the OpenScape software that addresses this vulnerability. Additionally, implement strict access controls and monitor your system for any unauthorized changes. Don't wait! You've got this! By taking these steps, you’ll be one step closer to securing your environment like a pro! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03901 · 90.2th percentile
Published
2023-10-04T00:00Z
EPSS history
Timeline
  • 04 OCT 00:00Z
    Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users
    cvelistv5