PT-2018-4299 · Unify · Openscape Desk Phone Ip+1

Publicado 2018-04-12 · Atualizado 2021-09-09 · CVE-2014-8421

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unify OpenStage SIP and OpenScape Desk Phone IP V3 devices versions prior to R3.32.0

Description The issue allows remote attackers to gain super-user privileges by leveraging SSH access and incorrect ownership of various scripts in the /Opera Deploy directory. These scripts include ConfigureCoreFile.sh, Traceroute.sh, apps.sh, conversion java2native.sh, coreCompression.sh, deletePasswd.sh, findHealthSvcFDs.sh, fw printenv.sh, fw setenv.sh, hw wd kicker.sh, new rootfs.sh, opera killSnmpd.sh, opera startSnmpd.sh, rebootOperaSoftware.sh, removeLogFiles.sh, runOperaServices.sh, setPasswd.sh, startAccTestSvcs.sh, usbNotification.sh, and appWeb.

Recommendations For versions prior to R3.32.0, update to version R3.32.0 or later to resolve the issue. As a temporary workaround, consider restricting SSH access and correcting the ownership of the vulnerable scripts in the /Opera Deploy directory until a patch is applied.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-8421

Produtos afetados

Openscape Desk Phone Ip

Unify Openstage Sip

Referências · 3

• https://networks.unify.com/security/advisories/OBSO-1501-02.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-8421 · Nota de Segurança
• https://modzero.ch/advisories/MZ-14-02-Siemens-Unify-OpenStage.txt · Nota