CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2014-2651
Critical (9.8) in atos. EPSS 1.7% chance of exploitation in the next 30 days.
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- atos:openscape_desk_phone_ip_35g_eco_firmware
- atos:openscape_desk_phone_ip_35g_firmware
- atos:openscape_desk_phone_ip_55g_firmware
- atos:openstage_15_firmware
- atos:openstage_15_g_firmware
- atos:openstage_20_e_firmware
- atos:openstage_20_firmware
- atos:openstage_20_g_firmware
- atos:openstage_40_firmware
- atos:openstage_40_g_firmware
- atos:openstage_60_firmware
- atos:openstage_60_g_firmware
- atos:openstage_80_firmware
- atos:openstage_80_g_firmware
References
- http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
- https://networks.unify.com/security/advisories/OBSO-1403-02.pdf
- http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-advisories.aspx
- https://networks.unify.com/security/advisories/OBSO-1403-02.pdf