CVE-2015-8251
Medium
Description
OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys.
SeverityMedium
CVSS5.9
Exploit probability—
ProductUnify Openstage 60 Firmware
PublishedSep 25, 2017
First seenSep 25, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unify openstage_60_firmware | 3.0 | — |
| unify openscape_desk_phone_ip_55g_sip_firmware | 3.0 | — |
| unify openstage_15_firmware | 3.0 | — |
| unify openstage_20e_firmware | 3.0 | — |
| unify openstage_20_firmware | 3.0 | — |
| unify openstage_40_firmware | 3.0 | — |
| unify openscape_desk_phone_ip_35g_sip_firmware | 3.0 | — |
| unify openscape_desk_phone_ip_35g_eco_sip_firmware | 3.0 | — |
| unify openscape_desk_phone_ip_55g_hfa_firmware | 3.0 | — |
| unify openscape_desk_phone_ip_35g_hfa_firmware | 3.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.