CVE:CVE-2015-8251
CNNVD:CNNVD-201709-1157
Unify OpenStage 60等都是美国优力飞（Unify）公司的IP电话机。
多款Unify产品中存在信息泄露漏洞，该漏洞源于程序并没有使用唯一的X.509证书和SSH主机密钥。远程攻击者可利用该漏洞实施中间人攻击或解密合法用户和设备之间的通讯。以下产品和版本受到影响：Unify OpenStage 60 / OpenScape Desk Phone IP 55G SIP 3版本；OpenStage 15/20E/20/40 / OpenScape Desk Phone IP 35G SIP 3版本；OpenScape Desk Phone IP 35G Eco SIP 3版本；OpenStage 60 / OpenScape Desk Phone IP 55G HFA 3版本；OpenStage 15/20E/20/40 / OpenScape Desk Phone IP 35G HFA 3版本；OpenScape Desk Phone IP 35G Eco HFA 3版本。
solution:Upgrade unify openstage_60_firmware to a higher version than 3.0,and avoid the version 3.0; Upgrade unify openscape_desk_phone_ip_55g_sip_firmware to a higher version than 3.0,and avoid the version 3.0; Upgrade unify openstage_15_firmware to a higher version than 3.0,and avoid the version 3.0; Upgrade unify openstage_20e_firmware to a higher version than 3.0,and avoid the version 3.0; Upgrade unify openstage_20_firmware to a higher version than 3.0,and avoid the version 3.0; Upgrade unify openstage_40_firmware to a higher version than 3.0,and avoid the version 3.0; Upgrade unify openscape_desk_phone_ip_35g_sip_firmware to a higher version than 3.0,and avoid the version 3.0; Upgrade unify openscape_desk_phone_ip_35g_eco_sip_firmware to a higher version than 3.0,and avoid the version 3.0; Upgrade unify openscape_desk_phone_ip_55g_hfa_firmware to a higher version than 3.0,and avoid the version 3.0; Upgrade unify openscape_desk_phone_ip_35g_hfa_firmware to a higher version than 3.0,and avoid the version 3.0