Vulnerability Database

Published: Jan 9, 2020
Updated: Nov 9, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2014-2650" target="_blank" rel="noopener"> CVE-2014-2650
Severity: Critical
Exploit:

311,448

Total vulnerabilities in the database

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface

CVSS v3:

CVSS v2:

CWEs:

OWASP TOP 10:

Software	From	Fixed in
atos / openstage_80_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_80_g_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_60_g_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_60_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_40_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_40_g_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_20_e_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_20_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_20_g_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_15_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_15_g_firmware	3-r3.11.0	3-r3.11.0.x
atos / openstage_5_firmware	3-r3.11.0	3-r3.11.0.x
atos / openscape_desk_phone_ip_35g_firmware	3-r3.11.0	3-r3.11.0.x
atos / openscape_desk_phone_ip_35g_eco_firmware	3-r3.11.0	3-r3.11.0.x
atos / openscape_desk_phone_ip_55g_firmware	3-r3.11.0	3-r3.11.0.x

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.