CVE:CVE-2014-2651
CNNVD:CNNVD-202001-310
Unify OpenStage/OpenScape Desk Phone IP SIP V3 R3.11.0之前版本中存在安全漏洞。攻击者可利用该漏洞绕过身份验证。
solution:Upgrade atos openstage_80_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_80_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_60_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_60_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_40_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_40_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_20_e_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_20_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_20_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_15_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openstage_15_g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openscape_desk_phone_ip_35g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openscape_desk_phone_ip_35g_eco_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0; Upgrade atos openscape_desk_phone_ip_55g_firmware to a higher version than v3:r3.11.0,and avoid the version v3:r3.11.0