atos records
28 published records for vendor atos.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 7
- With a fix record
- 3.6%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')12
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-269 Improper Privilege Management1
- CWE-287 Improper Authentication1
- CWE-331 Insufficient Entropy1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
28 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2014-2650No exploit | Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interfatos · openstage 80 firmware · CWE-78 | Critical9.8 | — | 2.5% | Jan 9, 2020 |
40Plan | CVE-2023-6269No exploit | Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch and Atos Unify OpenScape BCFatos · unify openscape bcf · CWE-88 | Critical9.8 | — | 1.8% | Dec 5, 2023 |
40Plan | CVE-2022-46404No exploit | A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.2atos · unify openscape 4000 assistant · CWE-77 | Critical9.8 | — | 1.8% | Dec 13, 2022 |
40Plan | CVE-2014-2651No exploit | Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interfaceatos · openstage 80 firmware · CWE-287 | Critical9.8 | — | 1.7% | Jan 9, 2020 |
39Monitor | CVE-2023-35034No exploit | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow reatos · unify openscape 4000 assistant · CWE-94 | Critical9.8 | — | 1.3% | Jun 11, 2023 |
39Monitor | CVE-2022-36444No exploit | An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, atos · unify openscape bcf | Critical9.8 | — | 1.0% | Jul 25, 2022 |
39Monitor | CVE-2023-29475No exploit | inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attackatos · unify openscape 4000 · CWE-77 | Critical9.8 | — | 0.8% | Apr 6, 2023 |
39Monitor | CVE-2023-29474No exploit | inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attackatos · unify openscape 4000 · CWE-77 | Critical9.8 | — | 0.8% | Apr 6, 2023 |
39Monitor | CVE-2023-29473No exploit | webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacatos · unify openscape 4000 · CWE-77 | Critical9.8 | — | 0.8% | Apr 6, 2023 |
35Monitor | CVE-2023-35033No exploit | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 Ratos · unify openscape 4000 assistant · CWE-77 | High8.8 | — | 1.5% | Jun 11, 2023 |
35Monitor | CVE-2023-35031No exploit | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 Ratos · unify openscape 4000 assistant · CWE-77 | High8.8 | — | 1.5% | Jun 11, 2023 |
35Monitor | CVE-2023-35032No exploit | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow coatos · unify openscape 4000 assistant · CWE-77 | High8.8 | — | 1.5% | Jun 11, 2023 |
35Monitor | CVE-2023-35035No exploit | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 Ratos · unify openscape 4000 assistant · CWE-77 | High8.8 | — | 1.5% | Jun 11, 2023 |
35Monitor | CVE-2023-45355No exploit | Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow comatos · unify openscape 4000 assistant · CWE-77 | High8.8 | — | 1.4% | Oct 9, 2023 |
35Monitor | CVE-2023-45356No exploit | Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow commandatos · unify openscape 4000 assistant · CWE-77 | High8.8 | — | 1.4% | Oct 9, 2023 |
35Monitor | CVE-2023-45351No exploit | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Managatos · unify openscape 4000 assistant · CWE-77 | High8.8 | — | 1.4% | Oct 9, 2023 |
35Monitor | CVE-2023-45354No exploit | Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitatos · unify openscape common management | High8.8 | — | 1.0% | Oct 9, 2023 |
35Monitor | CVE-2023-45352No exploit | Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary coatos · unify openscape common management · CWE-22 | High8.8 | — | 0.8% | Oct 9, 2023 |
35Monitor | CVE-2023-45353No exploit | Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary coatos · unify openscape common management · CWE-434 | High8.8 | — | 0.7% | Oct 9, 2023 |
35Monitor | CVE-2023-45350No exploit | Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may lead to the ability atos · unify openscape 4000 manager | High8.8 | — | 0.6% | Oct 9, 2023 |
32Monitor | CVE-2014-8422No exploit | The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generunify · openstage sip · CWE-331 | High8.1 | — | 1.5% | Apr 12, 2018 |
31Monitor | CVE-2019-19866No exploit | Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitivatos · unify openscape uc web client · CWE-639 | High7.5 | — | 1.9% | Feb 21, 2020 |
31Monitor | CVE-2014-8421No exploit | Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privileunify · openstage sip · CWE-264 | High7.5 | — | 1.7% | Apr 12, 2018 |
31Monitor | CVE-2023-41099No exploit | In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.(from a regular user to SYSTEM).atos · eviden cardos api · CWE-269 | High7.8 | — | 0.1% | Mar 22, 2024 |
30Monitor | CVE-2023-45349No exploit | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 beforeatos · unify openscape 4000 assistant | High7.5 | — | 0.5% | Oct 9, 2023 |
- CVE-2014-265040Plan
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interf
CriticalCVSS 9.8No exploitEPSS 2%atos · openstage 80 firmwareJan 9, 2020
- CVE-2023-626940Plan
Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch and Atos Unify OpenScape BCF
CriticalCVSS 9.8No exploitEPSS 1%atos · unify openscape bcfDec 5, 2023
- CVE-2022-4640440Plan
A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.2
CriticalCVSS 9.8No exploitEPSS 1%atos · unify openscape 4000 assistantDec 13, 2022
- CVE-2014-265140Plan
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
CriticalCVSS 9.8No exploitEPSS 1%atos · openstage 80 firmwareJan 9, 2020
- CVE-2023-3503439Monitor
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow re
CriticalCVSS 9.8No exploitEPSS 1%atos · unify openscape 4000 assistantJun 11, 2023
- CVE-2022-3644439Monitor
An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1,
CriticalCVSS 9.8No exploitEPSS 1%atos · unify openscape bcfJul 25, 2022
- CVE-2023-2947539Monitor
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attack
CriticalCVSS 9.8No exploitEPSS 0%atos · unify openscape 4000Apr 6, 2023
- CVE-2023-2947439Monitor
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attack
CriticalCVSS 9.8No exploitEPSS 0%atos · unify openscape 4000Apr 6, 2023
- CVE-2023-2947339Monitor
webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attac
CriticalCVSS 9.8No exploitEPSS 0%atos · unify openscape 4000Apr 6, 2023
- CVE-2023-3503335Monitor
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R
HighCVSS 8.8No exploitEPSS 1%atos · unify openscape 4000 assistantJun 11, 2023
- CVE-2023-3503135Monitor
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R
HighCVSS 8.8No exploitEPSS 1%atos · unify openscape 4000 assistantJun 11, 2023
- CVE-2023-3503235Monitor
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow co
HighCVSS 8.8No exploitEPSS 1%atos · unify openscape 4000 assistantJun 11, 2023
- CVE-2023-3503535Monitor
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R
HighCVSS 8.8No exploitEPSS 1%atos · unify openscape 4000 assistantJun 11, 2023
- CVE-2023-4535535Monitor
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow com
HighCVSS 8.8No exploitEPSS 1%atos · unify openscape 4000 assistantOct 9, 2023
- CVE-2023-4535635Monitor
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command
HighCVSS 8.8No exploitEPSS 1%atos · unify openscape 4000 assistantOct 9, 2023
- CVE-2023-4535135Monitor
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manag
HighCVSS 8.8No exploitEPSS 1%atos · unify openscape 4000 assistantOct 9, 2023
- CVE-2023-4535435Monitor
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbit
HighCVSS 8.8No exploitEPSS 1%atos · unify openscape common managementOct 9, 2023
- CVE-2023-4535235Monitor
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary co
HighCVSS 8.8No exploitEPSS 0%atos · unify openscape common managementOct 9, 2023
- CVE-2023-4535335Monitor
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary co
HighCVSS 8.8No exploitEPSS 0%atos · unify openscape common managementOct 9, 2023
- CVE-2023-4535035Monitor
Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may lead to the ability
HighCVSS 8.8No exploitEPSS 0%atos · unify openscape 4000 managerOct 9, 2023
- CVE-2014-842232Monitor
The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 gener
HighCVSS 8.1No exploitEPSS 1%unify · openstage sipApr 12, 2018
- CVE-2019-1986631Monitor
Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitiv
HighCVSS 7.5No exploitEPSS 1%atos · unify openscape uc web clientFeb 21, 2020
- CVE-2014-842131Monitor
Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privile
HighCVSS 7.5No exploitEPSS 1%unify · openstage sipApr 12, 2018
- CVE-2023-4109931Monitor
In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.(from a regular user to SYSTEM).
HighCVSS 7.8No exploitEPSS 0%atos · eviden cardos apiMar 22, 2024
- CVE-2023-4534930Monitor
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before
HighCVSS 7.5No exploitEPSS 0%atos · unify openscape 4000 assistantOct 9, 2023