critical9.8
CVE-2014-2651
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
Impact
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atos | Openstage 80 Firmware | Version v3 |
| Atos | Openstage 80 G Firmware | Version v3 |
| Atos | Openstage 60 G Firmware | Version v3 |
| Atos | Openstage 60 Firmware | Version v3 |
| Atos | Openstage 40 Firmware | Version v3 |
| Atos | Openstage 40 G Firmware | Version v3 |
| Atos | Openstage 20 E Firmware | Version v3 |
| Atos | Openstage 20 Firmware | Version v3 |
| Atos | Openstage 20 G Firmware | Version v3 |
| Atos | Openstage 15 Firmware | Version v3 |
| Atos | Openstage 15 G Firmware | Version v3 |
| Atos | Openscape Desk Phone Ip 35g Firmware | Version v3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
- https://networks.unify.com/security/advisories/OBSO-1403-02.pdf
- http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
- https://networks.unify.com/security/advisories/OBSO-1403-02.pdf