10
CVE-2014-2651
- EPSS 1.7%
- Veröffentlicht 09.01.2020 13:15:10
- Zuletzt bearbeitet 21.11.2024 02:06:43
- Erkennungen
LoginUnify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Atos ≫ Openstage 80 Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 80 G Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 60 G Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 60 Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 40 Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 40 G Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 20 E Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 20 Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 20 G Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 15 Firmware Version v3 Update r3.11.0
Atos ≫ Openstage 15 G Firmware Version v3 Update r3.11.0
Atos ≫ Openscape Desk Phone Ip 35g Firmware Version v3 Update r3.11.0
Atos ≫ Openscape Desk Phone Ip 35g Eco Firmware Version v3 Update r3.11.0
Atos ≫ Openscape Desk Phone Ip 55g Firmware Version v3 Update r3.11.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.7% | 0.742 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
https://networks.unify.com/security/advisories/OBSO-1403-02.pdf