VulnerabilityModified

CVE-2015-8251

MEDIUM 5.9EPSS 1.31%

Does this matter?

Lower severity and a low EPSS score (1.31%). Track it; it rarely justifies an emergency change on its own.

Description

OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys.

CVSS 3.0: 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 1.31% probability · 69th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: unify/openstage 60 firmware · unify/openscape desk phone ip 55g sip firmware · unify/openstage 15 firmware · unify/openstage 20e firmware · unify/openstage 20 firmware · unify/openstage 40 firmware · unify/openscape desk phone ip 35g sip firmware · unify/openscape desk phone ip 35g eco sip firmware · unify/openscape desk phone ip 55g hfa firmware · unify/openscape desk phone ip 35g hfa firmware
Source: cret@cert.org

References

http://www.kb.cert.org/vuls/id/566724Third Party Advisory, US Government Resource
https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdfVendor Advisory
https://networks.unify.com/security/advisories/OBSO-1511-02.pdfVendor Advisory
https://www.kb.cert.org/vuls/id/BLUU-A2PPZEThird Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/566724Third Party Advisory, US Government Resource
https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdfVendor Advisory
https://networks.unify.com/security/advisories/OBSO-1511-02.pdfVendor Advisory
https://www.kb.cert.org/vuls/id/BLUU-A2PPZEThird Party Advisory, US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.