CVE-2014-2650: Command Injection
First published: Thu Jan 09 2020(Updated: )
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Atos Openstage 80 Firmware | =v3-r3.11.0 | |
| Atos Openstage 80 G | ||
| Atos Openstage 80 Firmware | =v3-r3.11.0 | |
| Atos Openstage 80 G | ||
| Atos Openstage 60 G Firmware | =v3-r3.11.0 | |
| Atos Openstage 60 G | ||
| Atos Openstage 60 Firmware | =v3-r3.11.0 | |
| Unify Openstage 60 | ||
| Unify Openstage 40 Firmware | =v3-r3.11.0 | |
| Unify Openstage 40 | ||
| Atos Openstage 40 G Firmware | =v3-r3.11.0 | |
| Atos Openstage 40 G Firmware | ||
| Unify Openstage 20 Firmware | =v3-r3.11.0 | |
| Unify Openstage 20e | ||
| Unify Openstage 20 Firmware | =v3-r3.11.0 | |
| Unify Openstage 20e | ||
| Atos Openstage 20 G Firmware | =v3-r3.11.0 | |
| Atos Openstage 20 G Firmware | ||
| Unify Openstage 15 Firmware | =v3-r3.11.0 | |
| Atos Openstage 15 | ||
| Atos Openstage 15 | =v3-r3.11.0 | |
| Atos Openstage 15 G Firmware | ||
| Atos Openstage 5 Firmware | =v3-r3.11.0 | |
| Atos Openstage 5 | ||
| Unify OpenScape Desk Phone IP 35G | =v3-r3.11.0 | |
| Unify OpenScape Desk Phone IP 35G HFA Firmware | ||
| Atos OpenStage 35G | =v3-r3.11.0 | |
| Atos Openscape Desk Phone IP 35G Eco Firmware | ||
| Unify OpenScape Desk Phone IP 55G SIP Firmware | =v3-r3.11.0 | |
| Atos OpenScape Desk Phone IP 55G |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2014-2650?
CVE-2014-2650 is a vulnerability in the Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP that allows for OS command injection through the web-based management interface.
Is Atos Openstage 80 Firmware affected by CVE-2014-2650?
Yes, Atos Openstage 80 Firmware v3-r3.11.0 is affected by CVE-2014-2650.
How severe is CVE-2014-2650?
CVE-2014-2650 has a severity rating of 9.8, which is considered critical.
How can I fix CVE-2014-2650?
To fix CVE-2014-2650, update your Unify OpenStage / OpenScape Desk Phone IP to V3 R3.11.0 or later.
Where can I find more information about CVE-2014-2650?
You can find more information about CVE-2014-2650 in the security advisories from Unify: [link to security advisories](https://networks.unify.com/security/advisories/OBSO-1403-01.pdf).
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/weakness
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- vendor/atos
- canonical/atos openstage 80 firmware
- version/atos openstage 80 firmware/v3-r3.11.0
- canonical/atos openstage 80 g
- canonical/atos openstage 60 g firmware
- version/atos openstage 60 g firmware/v3-r3.11.0
- canonical/atos openstage 60 g
- canonical/atos openstage 60 firmware
- version/atos openstage 60 firmware/v3-r3.11.0
- canonical/unify openstage 60
- canonical/unify openstage 40 firmware
- version/unify openstage 40 firmware/v3-r3.11.0
- canonical/unify openstage 40
- canonical/atos openstage 40 g firmware
- version/atos openstage 40 g firmware/v3-r3.11.0
- canonical/unify openstage 20 firmware
- version/unify openstage 20 firmware/v3-r3.11.0
- canonical/unify openstage 20e
- canonical/atos openstage 20 g firmware
- version/atos openstage 20 g firmware/v3-r3.11.0
- canonical/unify openstage 15 firmware
- version/unify openstage 15 firmware/v3-r3.11.0
- canonical/atos openstage 15
- version/atos openstage 15/v3-r3.11.0
- canonical/atos openstage 15 g firmware
- canonical/atos openstage 5 firmware
- version/atos openstage 5 firmware/v3-r3.11.0
- canonical/atos openstage 5
- canonical/unify openscape desk phone ip 35g
- version/unify openscape desk phone ip 35g/v3-r3.11.0
- canonical/unify openscape desk phone ip 35g hfa firmware
- canonical/atos openstage 35g
- version/atos openstage 35g/v3-r3.11.0
- canonical/atos openscape desk phone ip 35g eco firmware
- canonical/unify openscape desk phone ip 55g sip firmware
- version/unify openscape desk phone ip 55g sip firmware/v3-r3.11.0
- canonical/atos openscape desk phone ip 55g