CVE-2022-36444 - CVE House
Back to Database
Status published High CVE-2022-36444

An issue was discovered in Atos Unify OpenScape SBC 9...

Vulnerability Description

An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker (with network access to the admin interface) to disrupt system availability or potentially compromise the confidentiality and integrity of the system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-36444

Credits & Attribution

No credits recorded in the NVD database.

References

More from atos

View All →
CVE-2022-46404
A command injection vulnerability has been identified in Atos Unify...
Critical 9.8
CVE-2019-19866
Atos Unify OpenScape UC Web Client V9 before version V9...
High 7.5
CVE-2019-19865
Atos Unify OpenScape UC Application V9 before version V9 R4.31.0...
Medium 6.1
CVE-2014-2651
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has...
Critical 9.8
CVE-2014-2650
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0...
Critical 9.8

Affected Vendor

Affected Software

unify openscape bcf, unify openscape branch, unify openscape session border controller
Vulnerable Versions:
10, 9

Timeline

Official Publish: July 25th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:U/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.