PT-2020-7628 · Unify · Unify Openstage+1

Published 2020-01-09 · Updated 2020-01-17 · CVE-2014-2650

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unify OpenStage / OpenScape Desk Phone IP versions prior to V3 R3.11.0

Description The issue concerns an OS command injection vulnerability in the web-based management interface of the affected device.

Recommendations For versions prior to V3 R3.11.0, update to V3 R3.11.0 or later to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2014-2650

Affected Products

Unify Openscape Desk Phone Ip

Unify Openstage

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2650 · Security Note
• https://networks.unify.com/security/advisories/OBSO-1403-01.pdf · Vendor Advisory
• http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx · Note