CVE-2014-8421

Unify former Siemens OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privileges by leveraging SSH access and incorrect ownership of 1 ConfigureCoreFile.sh, 2 Traceroute.sh, 3 apps.sh, 4 conversionjava2native.sh, 5 coreCompression.sh, 6...

CVE-2014-8421

CVE-2014-8421 affects Unify (formerly Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices prior to R3.32.0. The issue allows remote attackers to gain super-user privileges by exploiting SSH access and incorrect ownership of a set of startup and utility scripts in /Opera_Deploy (list inc...