CVE编号
CVE-2015-8251利用情况
暂无补丁情况
N/A披露时间
2017-09-26漏洞描述
Unify OpenStage 60等都是美国优力飞（Unify）公司的IP电话机。多款Unify产品中存在信息泄露漏洞，该漏洞源于程序未能使用唯一的X.509证书和SSH主机密钥。远程攻击者可利用该漏洞实施中间人攻击或解密合法用户和设备之间的通讯。
解决建议
厂商尚未提供漏洞修复方案，请关注厂商主页及时更新：https://unify.com/us/
参考链接 |
|
|---|---|
| http://www.kb.cert.org/vuls/id/566724 | |
| https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdf | |
| https://networks.unify.com/security/advisories/OBSO-1511-02.pdf | |
| https://www.kb.cert.org/vuls/id/BLUU-A2PPZE |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | unify | openscape_desk_phone_ip_35g_eco_sip_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | unify | openscape_desk_phone_ip_35g_hfa_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | unify | openscape_desk_phone_ip_35g_sip_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | unify | openscape_desk_phone_ip_55g_hfa_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | unify | openscape_desk_phone_ip_55g_sip_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | unify | openstage_15_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | unify | openstage_20e_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | unify | openstage_20_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | unify | openstage_40_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | unify | openstage_60_firmware | 3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openscape_desk_phone_ip_35g_eco_hfa | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openscape_desk_phone_ip_35g_eco_sip | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openscape_desk_phone_ip_35g_hfa | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openscape_desk_phone_ip_35g_sip | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openscape_desk_phone_ip_55g_hfa | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openscape_desk_phone_ip_55g_sip | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openstage_15 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openstage_20 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openstage_20e | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openstage_40 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | unify | openstage_60 | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 高
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 无
- 保密性 高
- 完整性 无
还没有评论，来说两句吧...