CVE-2014-2650 Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atos openstage 80 firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 80 g firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 60 g firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 60 firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 40 firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 40 g firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 20 e firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 20 firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 20 g firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 15 firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 15 g firmware | = v3-r3.11.0 | No fix listed |
| atos openstage 5 firmware | = v3-r3.11.0 | No fix listed |
| atos openscape desk phone ip 35g firmware | = v3-r3.11.0 | No fix listed |
| atos openscape desk phone ip 35g eco firmware | = v3-r3.11.0 | No fix listed |
| atos openscape desk phone ip 55g firmware | = v3-r3.11.0 | No fix listed |
References
- assets.yourcircuit.com third-party-advisory
- networks.unify.com vendor-advisory