Atos maintains a focused portfolio of enterprise unified communications and telephony products, including the OpenScape 4000 management suite and a range of IP desk phones, that serve as critical infrastructure in business environments. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur across its management and endpoint products through weakness classes centered on command and code injection, authentication bypass, and improper access controls—flaws that directly threaten the integrity and availability of communications infrastructure. The concentration of high-severity weaknesses in management interfaces and telephony control points reflects the privileged role these products play in enterprise networks and the injection-prone complexity of command parsing and policy enforcement in unified communications platforms. Defenders should treat Atos advisories affecting the OpenScape line as high-priority and ensure management interfaces are restricted to trusted networks; current severity and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Atos over time
Signals from CVEs in this vendor scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-2650CRITICAL Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface | Jan 9, 2020 | 9.8 | 31 | NO | NO |
CVE-2022-46404CRITICAL A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 befor | Dec 13, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-36444CRITICAL An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 1 | Jul 25, 2022 | 9.8 | 30 | NO | NO |
CVE-2023-6269CRITICAL An argument injection vulnerability has been identified in the
administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", be | Dec 5, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-29475CRITICAL inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the plat | Apr 6, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-29474CRITICAL inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the plat | Apr 6, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-29473CRITICAL webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the pla | Apr 6, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-35034CRITICAL Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated u | Jun 12, 2023 | 9.8 | 28 | NO | NO |
CVE-2023-45353HIGH Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging | Oct 9, 2023 | 8.8 | 27 | NO | NO |
CVE-2023-45355HIGH Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attac | Oct 9, 2023 | 8.8 | 26 | NO | NO |
Signals from CVEs in this vendor scope (28 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Atos.
Media articles that mention a CVE ID that affects a product developed by Atos — matched by CVE ID, not by vendor name.