PT-2017-7365 · Unify · Openscape Desk Phone Ip 55G Sip V3+7

Stefan ViehbཬK

·

Publicado

2017-09-25

·

Atualizado

2017-10-11

·

CVE-2015-8251

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3 OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G SIP V3 OpenScape Desk Phone IP 35G Eco SIP V3 OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3 OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3 OpenScape Desk Phone IP 35G Eco HFA V3
Description The issue is related to the use of non-unique X.509 certificates and SSH host keys in the affected devices.
Recommendations For OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G SIP V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenScape Desk Phone IP 35G Eco SIP V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, consider regenerating unique X.509 certificates and SSH host keys. For OpenScape Desk Phone IP 35G Eco HFA V3, consider regenerating unique X.509 certificates and SSH host keys.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-8251

Produtos afetados

Openscape Desk Phone Ip 35G Eco Hfa V3
Openscape Desk Phone Ip 35G Eco Sip V3
Openscape Desk Phone Ip 55G Hfa V3
Openscape Desk Phone Ip 55G Sip V3
Openstage 15
Openstage 20
Openstage 40
Openstage 60