Atos Openstage 20 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Atos Openstage 20 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2014-2650 — CVSS 9.8 (critical): Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management…
• CVE-2014-2651 — CVSS 9.8 (critical): Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface