Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
Atos records in CISA KEVNo Atos vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Openscape Desk Phone Ip 35g Eco Firmware · all components
Priority MEDIUM 47
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02574 · Published 2020-01-09 · No fix listed CWE-78
Priority MEDIUM 45
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.017 · Published 2020-01-09 · No fix listed CWE-287
Open these records in search →