CVE-2014-8422

ALTO 8.1CVE-2014-8422 · Published 12/04/2018 · updated 17/06/2026

In breve

CVE-2014-8422 è una vulnerabilità ALTO (CVSS 8.1) che riguarda openscape desk phone ip sip (unify), openstage sip (unify).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 75.7% delle vulnerabilità.
Correzione: aggiornare a r3.32.0 o successiva.

Package	Affected versions	Patched versions
openscape desk phone ip sip unify	`< r3.32.0`	`r3.32.0`
openstage sip unify	`< r3.32.0`	`r3.32.0`

Description

The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack.

References

networks.unify.com/security/advisories/OBSO-1501-02.pdf · Mitigation
modzero.ch/advisories/MZ-14-02-Siemens-Unify-OpenStage.txt · Third Party Advisory

Altre vulnerabilità di openscape desk phone ip sip

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free