CVE-2022-36444 Code injection in n/a
Unauthenticated remote attackers can execute code or disrupt availability on Atos Unify OpenScape SBC, Branch, and BCF devices via the admin interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-36444?
CVE-2022-36444 is a high-severity code injection vulnerability in n/a, published on 25 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker (with network access to the admin interface) to disrupt system availability or potentially compromise the confidentiality and integrity of the system.
Which versions are affected by CVE-2022-36444?
It affects 3 products.
Products include Atos Unify Openscape Bcf, Atos Unify Openscape Branch, Atos Unify Openscape Session Border Controller.
How do I fix CVE-2022-36444?
No fix has been published for CVE-2022-36444 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2022-36444 being exploited?
There is no known exploitation of CVE-2022-36444 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cpc9-mf28-84p2.