Medium · 5.9 CVE-2024-28065 EUVD-2024-25232GHSA-c8c6-87mv-3fm9

In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash.

Published Apr 5, 2024 · Updated Mar 28, 2025 · Assigned by mitre

Description

In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash.

Advisories 1

WID-SEC-2024-0771 Unify OpenScape Desk Phone: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen BSI CERT-Bund (WID) · Apr 2, 2024

References