critical
10
CWE
287
Advisory Published
Updated

CVE-2014-2651

First published: Thu Jan 09 2020(Updated: )

Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Atos Openstage 80 Firmware=v3-r3.11.0
Atos Openstage 80
Atos Openstage 80 G Firmware=v3-r3.11.0
Atos Openstage 80 G
Atos Openstage 60 G Firmware=v3-r3.11.0
Atos Openstage 60 G
Atos Openstage 60 Firmware=v3-r3.11.0
Atos Openstage 60
Atos Openstage 40 Firmware=v3-r3.11.0
Atos Openstage 40
Atos Openstage 40 G Firmware=v3-r3.11.0
Atos Openstage 40 G
Atos Openstage 20 E Firmware=v3-r3.11.0
Atos Openstage 20 E
Atos Openstage 20 Firmware=v3-r3.11.0
Atos Openstage 20
Atos Openstage 20 G Firmware=v3-r3.11.0
Atos Openstage 20 G
Atos Openstage 15 Firmware=v3-r3.11.0
Atos Openstage 15
Atos Openstage 15 G Firmware=v3-r3.11.0
Atos Openstage 15 G
Atos Openscape Desk Phone Ip 35g Firmware=v3-r3.11.0
Atos Openscape Desk Phone Ip 35g
Atos Openscape Desk Phone Ip 35g Eco Firmware=v3-r3.11.0
Atos Openscape Desk Phone Ip 35g Eco
Atos Openscape Desk Phone Ip 55g Firmware=v3-r3.11.0
Atos Openscape Desk Phone Ip 55g

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2014-2651?

    CVE-2014-2651 is a vulnerability found in Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0, which allows authentication bypass.

  • How severe is CVE-2014-2651?

    CVE-2014-2651 has a severity rating of 9.8, which is considered critical.

  • What software is affected by CVE-2014-2651?

    The following software versions are affected by CVE-2014-2651: Atos Openstage 80 Firmware v3-r3.11.0, Atos Openstage 80 G Firmware v3-r3.11.0, Atos Openstage 60 G Firmware v3-r3.11.0, Atos Openstage 60 Firmware v3-r3.11.0, Atos Openstage 40 Firmware v3-r3.11.0, Atos Openstage 40 G Firmware v3-r3.11.0, Atos Openstage 20 E Firmware v3-r3.11.0, Atos Openstage 20 Firmware v3-r3.11.0, Atos Openstage 20 G Firmware v3-r3.11.0, Atos Openstage 15 Firmware v3-r3.11.0, Atos Openstage 15 G Firmware v3-r3.11.0, Atos Openscape Desk Phone Ip 35g Firmware v3-r3.11.0, Atos Openscape Desk Phone Ip 35g Eco Firmware v3-r3.11.0, Atos Openscape Desk Phone Ip 55g Firmware v3-r3.11.0.

  • How do I fix CVE-2014-2651?

    To fix CVE-2014-2651, it is recommended to update Unify OpenStage/OpenScape Desk Phone IP SIP to V3 R3.11.0 or later.

  • Where can I find more information about CVE-2014-2651?

    You can find more information about CVE-2014-2651 at the following references: [link1](http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx), [link2](https://networks.unify.com/security/advisories/OBSO-1403-02.pdf).

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203