Openstage Sip
Approved changes feed: RSS · Atom
cpe:2.3:a:unify:openstage_sip:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unify (7b927037-b55c-54fd-aaec-8852a022f793) |
|---|---|
| Product | Openstage Sip (6e888bc4-f8a8-5f32-850a-f8355a88fb67) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-9563 |
vulnerable | 2026-06-03 14:34:27.347891 |
Details available
CRLF injection vulnerability in the web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allows remote authenticated users to modify the root password and consequently access the debug port using the serial interface via the ssh-password parameter to page.cmd.
Published: 2018-04-12T21:00:00.000Z
Updated: 2024-08-06T13:47:41.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8422 |
vulnerable | 2026-06-03 14:34:23.923561 |
Details available
The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack.
Published: 2018-04-12T21:00:00.000Z
Updated: 2024-08-06T13:18:48.283Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8421 |
vulnerable | 2026-06-03 14:34:23.918711 |
Details available
Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privileges by leveraging SSH access and incorrect ownership of (1) ConfigureCoreFile.sh, (2) Traceroute.sh, (3) apps.sh, (4) conversion_java2native.sh, (5) coreCompression.sh, (6) deletePasswd.sh, (7) findHealthSvcFDs.sh, (8) fw_printenv.sh, (9) fw_setenv.sh, (10) hw_wd_kicker.sh, (11) new_rootfs.sh, (12) opera_killSnmpd.sh, (13) opera_startSnmpd.sh, (14) rebootOperaSoftware.sh, (15) removeLogFiles.sh, (16) runOperaServices.sh, (17) setPasswd.sh, (18) startAccTestSvcs.sh, (19) usbNotification.sh, or (20) appWeb in /Opera_Deploy.
Published: 2018-04-12T21:00:00.000Z
Updated: 2024-08-06T13:18:48.296Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.