CVE-2015-8251

OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScape Desk Phone IP 35G Eco HFA V3 use non-unique X.509 certificates and SSH host keys.

• CWE-200

• http://www.kb.cert.org/vuls/id/566724Third Party Advisory, US Government Resource
• https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdfVendor Advisory
• https://networks.unify.com/security/advisories/OBSO-1511-02.pdfVendor Advisory
• https://www.kb.cert.org/vuls/id/BLUU-A2PPZEThird Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/566724Third Party Advisory, US Government Resource
• https://networks.unify.com/security/advisories/OBSO-1511-02-A.pdfVendor Advisory
• https://networks.unify.com/security/advisories/OBSO-1511-02.pdfVendor Advisory
• https://www.kb.cert.org/vuls/id/BLUU-A2PPZEThird Party Advisory, US Government Resource

Published

Sep 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8240The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, A…
• CVE-2015-8241The xmlNextChar function in libxml2 2.9.2 does not properly …
• CVE-2015-8242The xmlSAX2TextNode function in SAX2.c in the push interface…
• CVE-2015-8247Cross-site scripting (XSS) vulnerability in synnefoclient in…
• CVE-2015-8248Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-8249The FileUploadServlet class in ManageEngine Desktop Central …
• CVE-2015-8252The Frontel protocol before 3 on RSI Video Technologies Vide…
• CVE-2015-8253The Frontel protocol before 3 on RSI Video Technologies Vide…
• CVE-2015-8254The Frontel protocol before 3 on RSI Video Technologies Vide…
• CVE-2015-8255AXIS Communications products allow CSRF, as demonstrated by …
• CVE-2015-8256Multiple cross-site scripting (XSS) vulnerabilities in Axis …
• CVE-2015-8257The devtools.sh script in AXIS network cameras allows remote…