PT-2017-7365 · Unify · Openscape Desk Phone Ip 55G Sip V3+7
Stefan ViehbཬK
·
Published
2017-09-25
·
Updated
2017-10-11
·
CVE-2015-8251
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3
OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G SIP V3
OpenScape Desk Phone IP 35G Eco SIP V3
OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3
OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3
OpenScape Desk Phone IP 35G Eco HFA V3
Description
The issue is related to the use of non-unique X.509 certificates and SSH host keys in the affected devices.
Recommendations
For OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, consider regenerating unique X.509 certificates and SSH host keys.
For OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G SIP V3, consider regenerating unique X.509 certificates and SSH host keys.
For OpenScape Desk Phone IP 35G Eco SIP V3, consider regenerating unique X.509 certificates and SSH host keys.
For OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, consider regenerating unique X.509 certificates and SSH host keys.
For OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, consider regenerating unique X.509 certificates and SSH host keys.
For OpenScape Desk Phone IP 35G Eco HFA V3, consider regenerating unique X.509 certificates and SSH host keys.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openscape Desk Phone Ip 35G Eco Hfa V3
Openscape Desk Phone Ip 35G Eco Sip V3
Openscape Desk Phone Ip 55G Hfa V3
Openscape Desk Phone Ip 55G Sip V3
Openstage 15
Openstage 20
Openstage 40
Openstage 60