CVE-2015-8251
Estado: ModificadaMedia (5.9)—
OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 5.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.31%
- Percentil entre todas las CVEs puntuadas: 70
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (10)
Unify — Openscape Desk Phone IP 35G ECO SIP FirmwareUnify — Openscape Desk Phone IP 35G HFA FirmwareUnify — Openscape Desk Phone IP 35G SIP FirmwareUnify — Openscape Desk Phone IP 55G HFA FirmwareUnify — Openscape Desk Phone IP 55G SIP FirmwareUnify — Openstage 15 FirmwareUnify — Openstage 20 FirmwareUnify — Openstage 20E FirmwareUnify — Openstage 40 FirmwareUnify — Openstage 60 Firmware
CWE
- CWE-200
Referencias
- http://www.kb.cert.org/vuls/id/566724
- https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdf
- https://networks.unify.com/security/advisories/OBSO-1511-02.pdf
- https://www.kb.cert.org/vuls/id/BLUU-A2PPZE
- http://www.kb.cert.org/vuls/id/566724
- https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdf
- https://networks.unify.com/security/advisories/OBSO-1511-02.pdf
- https://www.kb.cert.org/vuls/id/BLUU-A2PPZE
JSON original (NVD)
Mostrar
{
"id": "CVE-2015-8251",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.9,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.2
}
]
},
"affected": [
{
"source": "cret@cert.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2017-09-25T21:29:00.913",
"references": [
{
"url": "http://www.kb.cert.org/vuls/id/566724",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "cret@cert.org"
},
{
"url": "https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdf",
"tags": [
"Vendor Advisory"
],
"source": "cret@cert.org"
},
{
"url": "https://networks.unify.com/security/advisories/OBSO-1511-02.pdf",
"tags": [
"Vendor Advisory"
],
"source": "cret@cert.org"
},
{
"url": "https://www.kb.cert.org/vuls/id/BLUU-A2PPZE",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "cret@cert.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/566724",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdf",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://networks.unify.com/security/advisories/OBSO-1511-02.pdf",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.kb.cert.org/vuls/id/BLUU-A2PPZE",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys."
},
{
"lang": "es",
"value": "OpenStage 60 y OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 y 40 y OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 y OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20 y 40 y OpenScape Desk Phone IP 35G HFA V3 y OpenScape Desk Phone IP 35G Eco HFA V3 emplean certificados X.509 y claves del host SSH no únicas."
}
],
"lastModified": "2026-06-17T00:34:12.893",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openstage_60_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "147287B6-C539-449A-9F30-A4D7E99F68FE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openstage_60:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E660AD8F-0961-4BB8-A453-57FFC205C062"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openscape_desk_phone_ip_55g_sip_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CD359E8-EF97-4CCF-900A-BACED8BEDC74"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openscape_desk_phone_ip_55g_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "54558DAB-7375-4E06-A5DC-110B6963886B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openstage_15_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "185454B9-A2EC-4A67-9AF9-003C3B597A90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openstage_15:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "85413B8C-CD66-404A-8128-7C896A3F2583"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openstage_20e_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4F654F2-66FF-4DF9-9A5C-93483F66BBF9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openstage_20e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BDA98506-7FE8-4935-BF06-BF4E8E301C80"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openstage_20_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0973C9AE-177F-4033-9633-31D81D1AD7EA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openstage_20:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1E8FFABC-782E-43BB-A402-C20B6B92342A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openstage_40_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E118131B-3EA0-48FE-B15D-4B15BD620565"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openstage_40:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "95BBDFB6-DDA4-4E2C-8DEA-EDD6C07BB0A1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openscape_desk_phone_ip_35g_sip_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "730EB27B-C209-4095-9556-169281BD97F7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openscape_desk_phone_ip_35g_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9AF1C62A-F54E-41A5-8CFC-258F0FCCD49B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openscape_desk_phone_ip_35g_eco_sip_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C85EAAD-3608-468C-8796-75AC9E979B9C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openscape_desk_phone_ip_35g_eco_sip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1023B130-DA3A-4200-BFA3-B90CE1523C21"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openscape_desk_phone_ip_55g_hfa_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "161E0A5F-313C-499F-9663-74843C2DB442"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openscape_desk_phone_ip_55g_hfa:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5730B600-9252-4781-8EA9-C7155D0E5FA1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openscape_desk_phone_ip_35g_hfa_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AB10C0F-19B7-4A56-A04D-CACDDEF8CA16"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openscape_desk_phone_ip_35g_hfa:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A14B60A3-2BCF-4073-9BBF-2CD9956A4EB0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:unify:openstage_60_firmware:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "147287B6-C539-449A-9F30-A4D7E99F68FE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:unify:openscape_desk_phone_ip_35g_eco_hfa:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "97B29875-C1A7-4850-8A04-4603BD212AC9"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cret@cert.org"
}