Critical severity9.8NVD Advisory· Published Jan 9, 2020· Updated Jun 17, 2026
CVE-2014-2650
CVE-2014-2650
Description
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
Affected products
17- cpe:2.3:o:atos:openscape_desk_phone_ip_35g_eco_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openscape_desk_phone_ip_35g_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openscape_desk_phone_ip_55g_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_15_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_15_g_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_20_e_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_20_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_20_g_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_40_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_40_g_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_5_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_60_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_60_g_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_80_firmware:v3:r3.11.0:*:*:*:*:*:*
- cpe:2.3:o:atos:openstage_80_g_firmware:v3:r3.11.0:*:*:*:*:*:*
- Unify/OpenStage / OpenScape Desk Phone IP SIPdescription
- Range: < V3 R3.11.0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.