critical9.8
CVE-2014-2650
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
Impact
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atos | Openstage 80 Firmware | Version v3 |
| Atos | Openstage 80 G Firmware | Version v3 |
| Atos | Openstage 60 G Firmware | Version v3 |
| Atos | Openstage 60 Firmware | Version v3 |
| Atos | Openstage 40 Firmware | Version v3 |
| Atos | Openstage 40 G Firmware | Version v3 |
| Atos | Openstage 20 E Firmware | Version v3 |
| Atos | Openstage 20 Firmware | Version v3 |
| Atos | Openstage 20 G Firmware | Version v3 |
| Atos | Openstage 15 Firmware | Version v3 |
| Atos | Openstage 15 G Firmware | Version v3 |
| Atos | Openstage 5 Firmware | Version v3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
- https://networks.unify.com/security/advisories/OBSO-1403-01.pdf
- http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
- https://networks.unify.com/security/advisories/OBSO-1403-01.pdf