Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos…
Priority MEDIUM 47CWE-88Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-88.
Summary
An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticated attacker to gain root access to the appliance via SSH (scope change) and also bypass authentication for the administrative interface and gain access as an arbitrary (administrative) user.
Why it matters now
EPSS 0.01861 79th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed OpenScape Session Border Controller (SBC) (Atos Unify): V10 R3.4.0OpenScape Branch (Atos Unify): V10 R3.4.0+1 more product
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Atos Unify | OpenScape Session Border Controller (SBC) | before V10 R3.4.0 | V10 R3.4.0 | Patch available | CNA |
| Atos Unify | OpenScape Branch | before V10 R3.4.0 | V10 R3.4.0 | Patch available | CNA |
| Atos Unify | OpenScape BCF | before V10 R10.12.00; before V10R 11.05.02 | V10 R10.12.00, V10R 11.05.02 | Patch available | CNA |
- OpenScape Session Border Controller (SBC) VendorAtos Unify Affected before V10 R3.4.0 Fixed in V10 R3.4.0 Patch available CNA
- OpenScape Branch VendorAtos Unify Affected before V10 R3.4.0 Fixed in V10 R3.4.0 Patch available CNA
- OpenScape BCF VendorAtos Unify Affected before V10 R10.12.00; before V10R 11.05.02 Fixed in V10 R10.12.00, V10R 11.05.02 Patch available CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:atos:unify_openscape_bcf:*:*:*:*:*:*:*:* | 10 to before 10r10.12.00 | Vulnerable | Atos |
| cpe:2.3:a:atos:unify_openscape_branch:*:*:*:*:*:*:*:* | 10 to before 10r3.4.0 | Vulnerable | Atos |
| cpe:2.3:a:atos:unify_openscape_session_border_controller:*:*:*:*:*:*:*:* | 10 to before 10r3.4.0 | Vulnerable | Atos |
- cpe:2.3:a:atos:unify_openscape_bcf:*:*:*:*:*:*:*:* Versions 10 to before 10r10.12.00 Vulnerable ·Atos
- cpe:2.3:a:atos:unify_openscape_branch:*:*:*:*:*:*:*:* Versions 10 to before 10r3.4.0 Vulnerable ·Atos
- cpe:2.3:a:atos:unify_openscape_session_border_controller:*:*:*:*:*:*:*:* Versions 10 to before 10r3.4.0 Vulnerable ·Atos
Remediation
- Fix · CNA OpenScape Session Border Controller (SBC) (Atos Unify) Fixed in V10 R3.4.0
- Fix · CNA OpenScape Branch (Atos Unify) Fixed in V10 R3.4.0
- Fix · CNA OpenScape BCF (Atos Unify) Fixed in V10 R10.12.00, V10R 11.05.02
Timeline
- 2026-10-02 Threatist record created from CVE-2023-6269
- 2026-10-03 Alias added: GHSA-xx5w-j8g7-4v5f
References
More Atos Unify Openscape Bcf vulnerabilities
- TI-2022-16769 An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify… CVSS 3.1CRITICAL 9.8
- TI-2023-14452 Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and… CVSS 3.1HIGH 7.2
Sources
- CVE-2023-6269 · CVE Program
- CVE-2023-6269 · NVD
- FIRST EPSS
- GHSA-xx5w-j8g7-4v5f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences