PT-2020-7629 · Unify · Openscape Desk Phone Ip+1

Published 2020-01-09 · Updated 2020-01-21 · CVE-2014-2651

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unify OpenStage/OpenScape Desk Phone IP SIP versions prior to V3 R3.11.0

Description The issue concerns an authentication bypass in the default mode of the Workpoint Interface.

Recommendations For versions prior to V3 R3.11.0, update to V3 R3.11.0 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2014-2651

Affected Products

Openscape Desk Phone Ip

Openstage

References · 3

• https://networks.unify.com/security/advisories/OBSO-1403-02.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2651 · Security Note
• http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx · Note