CVE-2014-9563

MOYENNE 4.9CVE-2014-9563 · Published 12/04/2018 · updated 17/06/2026

En bref

CVE-2014-9563 est une vulnérabilité MOYENNE (CVSS 4.9) touchant openscape desk phone ip sip (unify), openstage sip (unify).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.2%, plus élevée que 67.6% des vulnérabilités.
Correctif : mettre à jour vers r3.32.0 ou plus récent.

Package	Affected versions	Patched versions
openscape desk phone ip sip unify	`< r3.32.0`	`r3.32.0`
openstage sip unify	`< r3.32.0`	`r3.32.0`

Description

CRLF injection vulnerability in the web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allows remote authenticated users to modify the root password and consequently access the debug port using the serial interface via the ssh-password parameter to page.cmd.

References

networks.unify.com/security/advisories/OBSO-1501-02.pdf · Vendor Advisory
modzero.ch/advisories/MZ-14-02-Siemens-Unify-OpenStage.txt · Third Party Advisory

Autres vulnérabilités de openscape desk phone ip sip

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free