What is CVE-2023-45353?

CVE-2023-45353 is a high-severity vulnerability in Atos Unify Openscape Common Management, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.8/10. Published 2023-10-09.

How severe is CVE-2023-45353?

High severity. CVSS v3 base score is 8.8 out of 10.

Arbitrary file upload in Atos Unify Openscape Common Management

CVE-2023-45353

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting the underlying operating system. This is also known as OCMP-6591.

Vulnerability class: Unrestricted File Upload

EPSS: 0.007 (49.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Atos Unify_openscape_common_management — versions 10
N/a — versions n/a

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

cve@mitre.org (Vendor Advisory)
cve@mitre.org (Press/Media Coverage)

Frequently asked questions

What is CVE-2023-45353?: CVE-2023-45353 is a high-severity vulnerability in Atos Unify Openscape Common Management, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.8/10. Published 2023-10-09.
How severe is CVE-2023-45353?: High severity. CVSS v3 base score is 8.8 out of 10.