cve.bz

CVE-2014-8422

8.1 highEPSS 1.6%

High (8.1) in unify. EPSS 1.6% chance of exploitation in the next 30 days.

The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack.

Severity

CVSS 3.1

8.1 high
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE
CWE-331
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON