CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2014-2650
Critical (9.8) in atos. EPSS 2.6% chance of exploitation in the next 30 days.
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
Severity
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- atos:openscape_desk_phone_ip_35g_eco_firmware
- atos:openscape_desk_phone_ip_35g_firmware
- atos:openscape_desk_phone_ip_55g_firmware
- atos:openstage_15_firmware
- atos:openstage_15_g_firmware
- atos:openstage_20_e_firmware
- atos:openstage_20_firmware
- atos:openstage_20_g_firmware
- atos:openstage_40_firmware
- atos:openstage_40_g_firmware
- atos:openstage_5_firmware
- atos:openstage_60_firmware
- atos:openstage_60_g_firmware
- atos:openstage_80_firmware
- atos:openstage_80_g_firmware
References
- http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
- https://networks.unify.com/security/advisories/OBSO-1403-01.pdf
- http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
- https://networks.unify.com/security/advisories/OBSO-1403-01.pdf