CVE-2014-2650: Command Injection

Published Jan 9, 2020
·
Updated

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface

Affected Software

30 affected components
Atos Openstage 80 Firmware=v3-r3.11.0
Atos Openstage 80
Atos Openstage 80 G Firmware=v3-r3.11.0
Atos Openstage 80 G
Atos Openstage 60 G Firmware=v3-r3.11.0
Atos Openstage 60 G
Atos Openstage 60 Firmware=v3-r3.11.0
Atos Openstage 60
Atos Openstage 40 Firmware=v3-r3.11.0
Atos Openstage 40
Atos Openstage 40 G Firmware=v3-r3.11.0
Atos Openstage 40 G
Atos Openstage 20 E Firmware=v3-r3.11.0
Atos Openstage 20 E
Atos Openstage 20 Firmware=v3-r3.11.0
Atos Openstage 20
Atos Openstage 20 G Firmware=v3-r3.11.0
Atos Openstage 20 G
Atos Openstage 15 Firmware=v3-r3.11.0
Atos Openstage 15
Atos Openstage 15 G Firmware=v3-r3.11.0
Atos Openstage 15 G
Atos Openstage 5 Firmware=v3-r3.11.0
Atos Openstage 5
Atos Openscape Desk Phone Ip 35g Firmware=v3-r3.11.0
Atos Openscape Desk Phone Ip 35g
Atos Openscape Desk Phone Ip 35g Eco Firmware=v3-r3.11.0
Atos Openscape Desk Phone Ip 35g Eco
Atos Openscape Desk Phone Ip 55g Firmware=v3-r3.11.0
Atos Openscape Desk Phone Ip 55g

Event History

Jan 9, 2020
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
Description

Frequently Asked Questions

1

What is CVE-2014-2650?

CVE-2014-2650 is a vulnerability in the Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP that allows for OS command injection through the web-based management interface.

2

Is Atos Openstage 80 Firmware affected by CVE-2014-2650?

Yes, Atos Openstage 80 Firmware v3-r3.11.0 is affected by CVE-2014-2650.

3

How severe is CVE-2014-2650?

CVE-2014-2650 has a severity rating of 9.8, which is considered critical.

4

How can I fix CVE-2014-2650?

To fix CVE-2014-2650, update your Unify OpenStage / OpenScape Desk Phone IP to V3 R3.11.0 or later.

5

Where can I find more information about CVE-2014-2650?

You can find more information about CVE-2014-2650 in the security advisories from Unify: [link to security advisories](https://networks.unify.com/security/advisories/OBSO-1403-01.pdf).

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203