Is CVE-2022-36444 actively exploited?

No active exploitation of CVE-2022-36444 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-36444 be exploited remotely?

Yes. CVE-2022-36444 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-36444?

CVE-2022-36444 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2022-36444

CRITICAL

CVE-2022-36444

NVD-CWE-noinfoPublished: July 25, 2022· Updated: Jun 17, 2026

9.8

CVSS v3.1

Official Description

An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker (with network access to the admin interface) to disrupt system availability or potentially compromise the confidentiality and integrity of the system.

NVD Source

Technical Analysis

CVE-2022-36444 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.