Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
Unify OpenStage /
Exploit
CVE-2014-2650
NVD
Refer to CVE-2014-2650 NVD advisory