High severity · published Feb 8, 2024
CVE-2023-40265
An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911
8.8
CVSS
0.9%
EPSS
No
On KEV
Description
An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution via file upload.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UO
Unify Openscape Xpressions Webassistant · Mitel
7.0 before 7r1_fr5_hf42_p911 · source: NVD
Affected product
UO
Unify Openscape Xpressions Webassistant
Mitel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-40265
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-40265
Vendor Advisory
https://networks.unify.com/security/advisories/OBSO-2305-03.pdf
More from Unify Openscape Xpressions Webassistant
9.8
CVE-2023-40266
An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911