CVE:CVE-2014-2650
CNNVD:CNNVD-202001-309
Unify OpenStage/OpenScape Desk Phone IP V3 R3.11.0 SIP之前版本中的Web管理界面存在操作系统命令注入漏洞。远程攻击者可利用该漏洞执行任意操作系统命令。
solution:Upgrade atos openstage_80_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_80_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_60_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_60_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_40_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_40_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_20_e_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_20_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_20_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_15_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_15_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_5_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openscape_desk_phone_ip_35g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openscape_desk_phone_ip_35g_eco_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openscape_desk_phone_ip_55g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0