CVE-2014-2651
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the...
CVE-2014-2651 is a critical vulnerability (CVSS 9.8) in Atos Openscape Desk Phone Ip 35g Eco Firmware, published January 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.70%, the 77th percentile. No source names a fixed version.
- Severity
- 9.8 CriticalCVSS 3.1, NVD
- Exploit chance
- 1.70%EPSS, 77th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
- atos openscape desk phone ip 35g eco firmware
- atos openscape desk phone ip 35g firmware
- atos openscape desk phone ip 55g firmware
- atos openstage 15 firmware
- atos openstage 15 g firmware
- atos openstage 20 e firmware
- atos openstage 20 firmware
- atos openstage 20 g firmware
- atos openstage 40 firmware
- atos openstage 40 g firmware
- atos openstage 60 firmware
- atos openstage 60 g firmware
Show 2 moreShow less
What each source reports
NVD Score used
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
- Record
CVE-2014-2651- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE ListNo score
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
- Record
CVE-2014-2651- Updated
- 2026-11-02
EUVDEUVD-2014-2683No score
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
- Record
EUVD-2014-2683- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3g7m-jx8x-3j3xNo score
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the...
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
- Record
GHSA-3g7m-jx8x-3j3x- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.