What’s Vulnerable › Vulnerabilities

CVE-2014-2650

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-09 · updated 2026-06-17
• Weakness: CWE-78

Description

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface

Affected products

• Atos Openscape Desk Phone Ip 35G Eco Firmware: v3-r3.11.0
• Atos Openscape Desk Phone Ip 35G Firmware: v3-r3.11.0
• Atos Openscape Desk Phone Ip 55G Firmware: v3-r3.11.0
• Atos Openstage 15 Firmware: v3-r3.11.0
• Atos Openstage 15 G Firmware: v3-r3.11.0
• Atos Openstage 20 E Firmware: v3-r3.11.0
• Atos Openstage 20 Firmware: v3-r3.11.0
• Atos Openstage 20 G Firmware: v3-r3.11.0
• Atos Openstage 40 Firmware: v3-r3.11.0
• Atos Openstage 40 G Firmware: v3-r3.11.0
• Atos Openstage 5 Firmware: v3-r3.11.0
• Atos Openstage 60 Firmware: v3-r3.11.0
• Atos Openstage 60 G Firmware: v3-r3.11.0
• Atos Openstage 80 Firmware: v3-r3.11.0
• Atos Openstage 80 G Firmware: v3-r3.11.0

References

• http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
• https://networks.unify.com/security/advisories/OBSO-1403-01.pdf
• http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
• https://networks.unify.com/security/advisories/OBSO-1403-01.pdf

Get alerted when CVE-2014-2650 or the next vulnerability affects your stack