Lucene search

CertccCVE-2015-8251

HistorySep 25, 2017 - 9:29 p.m.

CVE-2015-8251

2017-09-2521:29:00

CWE-200

certcc

web.nvd.nist.gov

cve-2015-8251

security

non-unique x.509 certificates

ssh

openstage

openscape

desk phone ip

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

50.2%

JSON

OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys.

Affected configurations

Nvd

Node

unifyopenstage_60_firmwareMatch3.0

AND

unifyopenstage_60Match-

Node

unifyopenscape_desk_phone_ip_55g_sip_firmwareMatch3.0

AND

unifyopenscape_desk_phone_ip_55g_sipMatch-

Node

unifyopenstage_15_firmwareMatch3.0

AND

unifyopenstage_15Match-

Node

unifyopenstage_20e_firmwareMatch3.0

AND

unifyopenstage_20eMatch-

Node

unifyopenstage_20_firmwareMatch3.0

AND

unifyopenstage_20Match-

Node

unifyopenstage_40_firmwareMatch3.0

AND

unifyopenstage_40Match-

Node

unifyopenscape_desk_phone_ip_35g_sip_firmwareMatch3.0

AND

unifyopenscape_desk_phone_ip_35g_sipMatch-

Node

unifyopenscape_desk_phone_ip_35g_eco_sip_firmwareMatch3.0

AND

unifyopenscape_desk_phone_ip_35g_eco_sipMatch-

Node

unifyopenscape_desk_phone_ip_55g_hfa_firmwareMatch3.0

AND

unifyopenscape_desk_phone_ip_55g_hfaMatch-

Node

unifyopenscape_desk_phone_ip_35g_hfa_firmwareMatch3.0

AND

unifyopenscape_desk_phone_ip_35g_hfaMatch-

Node

unifyopenstage_60_firmwareMatch3.0

AND

unifyopenscape_desk_phone_ip_35g_eco_hfaMatch-

VendorProductVersionCPE
unifyopenstage_60_firmware3.0cpe:2.3:o:unify:openstage_60_firmware:3.0:*:*:*:*:*:*:*
unifyopenstage_60-cpe:2.3:h:unify:openstage_60:-:*:*:*:*:*:*:*
unifyopenscape_desk_phone_ip_55g_sip_firmware3.0cpe:2.3:o:unify:openscape_desk_phone_ip_55g_sip_firmware:3.0:*:*:*:*:*:*:*
unifyopenscape_desk_phone_ip_55g_sip-cpe:2.3:h:unify:openscape_desk_phone_ip_55g_sip:-:*:*:*:*:*:*:*
unifyopenstage_15_firmware3.0cpe:2.3:o:unify:openstage_15_firmware:3.0:*:*:*:*:*:*:*
unifyopenstage_15-cpe:2.3:h:unify:openstage_15:-:*:*:*:*:*:*:*
unifyopenstage_20e_firmware3.0cpe:2.3:o:unify:openstage_20e_firmware:3.0:*:*:*:*:*:*:*
unifyopenstage_20e-cpe:2.3:h:unify:openstage_20e:-:*:*:*:*:*:*:*
unifyopenstage_20_firmware3.0cpe:2.3:o:unify:openstage_20_firmware:3.0:*:*:*:*:*:*:*
unifyopenstage_20-cpe:2.3:h:unify:openstage_20:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
unify	openstage_60_firmware	3.0	cpe:2.3:o:unify:openstage_60_firmware:3.0:::::::*
unify	openstage_60	-	cpe:2.3:h:unify:openstage_60:-:::::::*
unify	openscape_desk_phone_ip_55g_sip_firmware	3.0	cpe:2.3:o:unify:openscape_desk_phone_ip_55g_sip_firmware:3.0:::::::*
unify	openscape_desk_phone_ip_55g_sip	-	cpe:2.3:h:unify:openscape_desk_phone_ip_55g_sip:-:::::::*
unify	openstage_15_firmware	3.0	cpe:2.3:o:unify:openstage_15_firmware:3.0:::::::*
unify	openstage_15	-	cpe:2.3:h:unify:openstage_15:-:::::::*
unify	openstage_20e_firmware	3.0	cpe:2.3:o:unify:openstage_20e_firmware:3.0:::::::*
unify	openstage_20e	-	cpe:2.3:h:unify:openstage_20e:-:::::::*
unify	openstage_20_firmware	3.0	cpe:2.3:o:unify:openstage_20_firmware:3.0:::::::*
unify	openstage_20	-	cpe:2.3:h:unify:openstage_20:-:::::::*

Rows per page:

1-10 of 211

References

www.kb.cert.org/vuls/id/566724

networks.unify.com/security/advisories/OBSO-1511-02-A.pdf

networks.unify.com/security/advisories/OBSO-1511-02.pdf

www.kb.cert.org/vuls/id/BLUU-A2PPZE

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

50.2%

JSON

Related for CVE-2015-8251