An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify…
Priority MEDIUM 44Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker (with network access to the admin interface) to disrupt system availability or potentially compromise the confidentiality and integrity of the system.
Why it matters now
EPSS 0.01073 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:atos:unify_openscape_bcf:*:*:*:*:*:*:*:* | 10 to before 10r9.12.1 | Vulnerable | Atos |
| cpe:2.3:a:atos:unify_openscape_branch:*:*:*:*:*:*:*:* | 10 to before 10r2.1.1 | Vulnerable | Atos |
| cpe:2.3:a:atos:unify_openscape_branch:9:*:*:*:*:*:*:* | 9 | Vulnerable | Atos |
| cpe:2.3:a:atos:unify_openscape_session_border_controller:*:*:*:*:*:*:*:* | 10 to before 10r2.2.1 | Vulnerable | Atos |
| cpe:2.3:a:atos:unify_openscape_session_border_controller:9:*:*:*:*:*:*:* | 9 | Vulnerable | Atos |
- cpe:2.3:a:atos:unify_openscape_bcf:*:*:*:*:*:*:*:* Versions 10 to before 10r9.12.1 Vulnerable ·Atos
- cpe:2.3:a:atos:unify_openscape_branch:*:*:*:*:*:*:*:* Versions 10 to before 10r2.1.1 Vulnerable ·Atos
- cpe:2.3:a:atos:unify_openscape_branch:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·Atos
- cpe:2.3:a:atos:unify_openscape_session_border_controller:*:*:*:*:*:*:*:* Versions 10 to before 10r2.2.1 Vulnerable ·Atos
- cpe:2.3:a:atos:unify_openscape_session_border_controller:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·Atos
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-36444
- 2026-10-03 Alias added: GHSA-cpc9-mf28-84p2
References
More Atos Unify Openscape Bcf vulnerabilities
- TI-2023-05757 Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos… CVSS 3.1CRITICAL 10.0
- TI-2023-14452 Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and… CVSS 3.1HIGH 7.2
Sources
- CVE-2022-36444 · CVE Program
- CVE-2022-36444 · NVD
- FIRST EPSS
- GHSA-cpc9-mf28-84p2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences