CVE-2014-2651: atos openstage 80 firmware +13 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2014-2651

CVSS 9.8 · Critical EPSS 1,7%

Kerentanan Improper Authentication pada atos openstage 80 firmware, atos openstage 80 g firmware +12 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface

Rincian

Terbit di NVD: 9 Januari 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-287: Improper Authentication
EPSS (30 hari): 1,7% peluang dieksploitasi; lebih tinggi dari 76,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
atos	openstage 80 firmware	Versi v3 r3.11.0
atos	openstage 80 g firmware	Versi v3 r3.11.0
atos	openstage 60 g firmware	Versi v3 r3.11.0
atos	openstage 60 firmware	Versi v3 r3.11.0
atos	openstage 40 firmware	Versi v3 r3.11.0
atos	openstage 40 g firmware	Versi v3 r3.11.0
atos	openstage 20 e firmware	Versi v3 r3.11.0
atos	openstage 20 firmware	Versi v3 r3.11.0
atos	openstage 20 g firmware	Versi v3 r3.11.0
atos	openstage 15 firmware	Versi v3 r3.11.0
atos	openstage 15 g firmware	Versi v3 r3.11.0
atos	openscape desk phone ip 35g firmware	Versi v3 r3.11.0
atos	openscape desk phone ip 35g eco firmware	Versi v3 r3.11.0
atos	openscape desk phone ip 55g firmware	Versi v3 r3.11.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://networks.unify.com/security/advisories/OBSO-1403-02.pdf advisory vendor
http://assets.yourcircuit.com/Internet/web/Container%20Site/Misc/Footer-content/privacy-policy/security-adviso... advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.