What’s Vulnerable › Vulnerabilities

CVE-2014-2651

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-09 · updated 2026-06-17
• Weakness: CWE-287

Description

Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface

Affected products

• Atos Openscape Desk Phone Ip 35G Eco Firmware: v3-r3.11.0
• Atos Openscape Desk Phone Ip 35G Firmware: v3-r3.11.0
• Atos Openscape Desk Phone Ip 55G Firmware: v3-r3.11.0
• Atos Openstage 15 Firmware: v3-r3.11.0
• Atos Openstage 15 G Firmware: v3-r3.11.0
• Atos Openstage 20 E Firmware: v3-r3.11.0
• Atos Openstage 20 Firmware: v3-r3.11.0
• Atos Openstage 20 G Firmware: v3-r3.11.0
• Atos Openstage 40 Firmware: v3-r3.11.0
• Atos Openstage 40 G Firmware: v3-r3.11.0
• Atos Openstage 60 Firmware: v3-r3.11.0
• Atos Openstage 60 G Firmware: v3-r3.11.0
• Atos Openstage 80 Firmware: v3-r3.11.0
• Atos Openstage 80 G Firmware: v3-r3.11.0

References

• http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
• https://networks.unify.com/security/advisories/OBSO-1403-02.pdf
• http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
• https://networks.unify.com/security/advisories/OBSO-1403-02.pdf

Get alerted when CVE-2014-2651 or the next vulnerability affects your stack