CVE Feed

    Dashboard / CVE / CVE-2022-46404

    CVE-2022-46404

    A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to the system.

    Published:Dec 13, 2022
    Last Modified:Apr 22, 2025
    EPS:Dec 13, 2022
    EPSS Score:0.03189
    CVSS Score:9.8

    Affected Products

    Vendor
    Atos
    Product
    Unify Openscape 4000 Assistant
    Vendor
    Atos
    Product
    Unify Openscape 4000 Manager

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-45355 (CVSS 8.8) — Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 befor…
    CVE-2023-45349 (CVSS 7.5) — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 …
    CVE-2023-45351 (CVSS 8.8) — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 befo…
    CVE-2023-45356 (CVSS 8.8) — Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Ho…
    CVE-2023-35035 (CVSS 8.8) — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R…
    CVE-2023-35031 (CVSS 8.8) — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R…
    CVE-2023-35032 (CVSS 8.8) — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1…
    CVE-2023-35033 (CVSS 8.8) — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R…
    CVE-2023-35034 (CVSS 9.8) — Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High