Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 12/04/2018 Updated: 09/09/2021

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.9 | Impact Score: 3.6 | Exploitability Score: 1.2

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

CRLF injection vulnerability in the web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allows remote authenticated users to modify the root password and consequently access the debug port using the serial interface via the ssh-password parameter to page.cmd.

Vulnerable Product	Search on Vulmon	Subscribe to Product
unify openstage_sip
unify openscape_desk_phone_ip_sip

CWE-93 https://www.modzero.ch/advisories/MZ-14-02-Siemens-Unify-OpenStage.txt https://networks.unify.com/security/advisories/OBSO-1501-02.pdf https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-9563

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect