Description
OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys.
References (4)
Core 4
Core References
Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/566724
Vendor Advisory x_refsource_confirm
https://networks.unify.com/security/advisories/OBSO-1511-02.pdf
Vendor Advisory x_refsource_confirm
https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdf
Third Party Advisory, US Government Resource x_refsource_confirm
https://www.kb.cert.org/vuls/id/BLUU-A2PPZE
Scores
CVSS v3
5.9
EPSS
0.0131
EPSS Percentile
67.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (10)
unify/openscape_desk_phone_ip_35g_eco_sip_firmware
3.0
unify/openscape_desk_phone_ip_35g_hfa_firmware
3.0
unify/openscape_desk_phone_ip_35g_sip_firmware
3.0
unify/openscape_desk_phone_ip_55g_hfa_firmware
3.0
unify/openscape_desk_phone_ip_55g_sip_firmware
3.0
unify/openstage_15_firmware
3.0
unify/openstage_20_firmware
3.0
unify/openstage_20e_firmware
3.0
unify/openstage_40_firmware
3.0
unify/openstage_60_firmware
3.0
Published
Sep 25, 2017
Tracked Since
Feb 18, 2026