CVE-2014-2650
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2020-01-09
- Last modified
- 2024-08-06
- Weaknesses
- CWE-78
Affected products
- Openscape Desk Phone Ip 35g Eco Firmware (Atos)
- Openscape Desk Phone Ip 35g Firmware (Atos)
- Openscape Desk Phone Ip 55g Firmware (Atos)
- Openstage 15 Firmware (Atos)
- Openstage 15 G Firmware (Atos)
- Openstage 20 E Firmware (Atos)
- Openstage 20 Firmware (Atos)
- Openstage 20 G Firmware (Atos)
- Openstage 40 Firmware (Atos)
- Openstage 40 G Firmware (Atos)
- Openstage 5 Firmware (Atos)
- Openstage 60 Firmware (Atos)
- Openstage 60 G Firmware (Atos)
- Openstage 80 Firmware (Atos)
- Openstage 80 G Firmware (Atos)
References
- http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
- https://networks.unify.com/security/advisories/OBSO-1403-01.pdf
