#openscape — Public Fediverse posts

#BSI WID-SEC-2025-1109: [NEU] [mittel] #Mitel #OpenScape #Xpressions: Schwachstelle ermöglicht Offenlegung von Informationen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mitel OpenScape Xpressions ausnutzen, um Informationen offenzulegen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1109

#BSI WID-SEC-2025-0169: [NEU] [mittel] #Unify #OpenScape 4000: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Ein lokaler oder entfernter, anonymer Angreifer kann mehrere Schwachstellen in Unify OpenScape 4000 ausnutzen, um seine Privilegien zu erhöhen und um beliebige Befehle auszuführen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0169

Na, schon mal über Unify OpenScape nachgedacht? Lass es.

https://stefanritter.de/blog/unify-openscape-sucks/

#unify #openscape

Ich habe Gelegenheit an #DECT Telefone #Unify #OpenScape Modell "SL5" ranzukommen. Taugen die für #GPN oder andere Events im #Chaos ?

Sind ganz nifty, mit MicroUSB zum Laden und evtl. auch mit Ladeschalte zum reinstellen.

Ich habe Gelegenheit an #DECT Telefone #Unify #OpenScape Modell "SL5" ranzukommen. Taugen die für #GPN oder andere Events im #Chaos ?

Sind ganz nifty, mit MicroUSB zum Laden und evtl. auch mit Ladeschalte zum reinstellen.

Ich habe Gelegenheit an #DECT Telefone #Unify #OpenScape Modell "SL5" ranzukommen. Taugen die für #GPN oder andere Events im #Chaos ?

Sind ganz nifty, mit MicroUSB zum Laden und evtl. auch mit Ladeschalte zum reinstellen.

Ich habe Gelegenheit an #DECT Telefone #Unify #OpenScape Modell "SL5" ranzukommen. Taugen die für #GPN oder andere Events im #Chaos ?

Sind ganz nifty, mit MicroUSB zum Laden und evtl. auch mit Ladeschalte zum reinstellen.

Our colleague Michael will be speaking about #Unify #OpenScape and #OpenStage #VoIP phones at the #Area41 security conference in Zurich on June 6. If you use these VoIP systems, we recommend coming to the talk.

Our colleague Michael will be speaking about #Unify #OpenScape and #OpenStage #VoIP phones at the #Area41 security conference in Zurich on June 6. If you use these VoIP systems, we recommend coming to the talk.

Our colleague Michael will be speaking about #Unify #OpenScape and #OpenStage #VoIP phones at the #Area41 security conference in Zurich on June 6. If you use these VoIP systems, we recommend coming to the talk.

Our colleague Michael will be speaking about #Unify #OpenScape and #OpenStage #VoIP phones at the #Area41 security conference in Zurich on June 6. If you use these VoIP systems, we recommend coming to the talk.

Remote code execution and elevation of local privileges in #Mitel Unify #OpenStage and #OpenScape VoIP phones

https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/

I especially like attack number 5 “OpenScape – Secure Shell Privilege escalation to root via SetUID programs”

* Manipulate the framebuffer, so a screenshot results in an executable file.
* Overwrite a system file with that screenshot tool.
* Add a script to that gets executed with root privilege while booting.

https://github.com/pentagridsec/openstage-exploit-chain/blob/main/openstage-fakedls-server.py

Remote code execution and elevation of local privileges in #Mitel Unify #OpenStage and #OpenScape VoIP phones

https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/

I especially like attack number 5 “OpenScape – Secure Shell Privilege escalation to root via SetUID programs”

* Manipulate the framebuffer, so a screenshot results in an executable file.
* Overwrite a system file with that screenshot tool.
* Add a script to that gets executed with root privilege while booting.

https://github.com/pentagridsec/openstage-exploit-chain/blob/main/openstage-fakedls-server.py

Remote code execution and elevation of local privileges in #Mitel Unify #OpenStage and #OpenScape VoIP phones

https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/

I especially like attack number 5 “OpenScape – Secure Shell Privilege escalation to root via SetUID programs”

* Manipulate the framebuffer, so a screenshot results in an executable file.
* Overwrite a system file with that screenshot tool.
* Add a script to that gets executed with root privilege while booting.

https://github.com/pentagridsec/openstage-exploit-chain/blob/main/openstage-fakedls-server.py

Remote code execution and elevation of local privileges in #Mitel Unify #OpenStage and #OpenScape VoIP phones

https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/

I especially like attack number 5 “OpenScape – Secure Shell Privilege escalation to root via SetUID programs”

* Manipulate the framebuffer, so a screenshot results in an executable file.
* Overwrite a system file with that screenshot tool.
* Add a script to that gets executed with root privilege while booting.

https://github.com/pentagridsec/openstage-exploit-chain/blob/main/openstage-fakedls-server.py

♫ Ground control to Major Tom, take the patch and put secure mode on. ♫ https://github.com/pentagridsec/openstage-exploit-chain #openstage #openscape #unify

♫ Ground control to Major Tom, take the patch and put secure mode on. ♫ https://github.com/pentagridsec/openstage-exploit-chain #openstage #openscape #unify

♫ Ground control to Major Tom, take the patch and put secure mode on. ♫ https://github.com/pentagridsec/openstage-exploit-chain #openstage #openscape #unify

♫ Ground control to Major Tom, take the patch and put secure mode on. ♫ https://github.com/pentagridsec/openstage-exploit-chain #openstage #openscape #unify

RCE and LPE in a wide range of Mitel Unify #OpenStage and #OpenScape VoIP phones with default config: https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/ #itsecurity #infosec #pentesting #voip #unify

RCE and LPE in a wide range of Mitel Unify #OpenStage and #OpenScape VoIP phones with default config: https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/ #itsecurity #infosec #pentesting #voip #unify

RCE and LPE in a wide range of Mitel Unify #OpenStage and #OpenScape VoIP phones with default config: https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/ #itsecurity #infosec #pentesting #voip #unify

RCE and LPE in a wide range of Mitel Unify #OpenStage and #OpenScape VoIP phones with default config: https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/ #itsecurity #infosec #pentesting #voip #unify

Today's the day: I'm presenting about Soundscape, Openscape, and the general class of app at the first AT confrence held by the New York Public Library. Nervus but incredibly excited. I'll post a link here in a bit. #ATNYC #soundscape #openscape

Today's the day: I'm presenting about Soundscape, Openscape, and the general class of app at the first AT confrence held by the New York Public Library. Nervus but incredibly excited. I'll post a link here in a bit. #ATNYC #soundscape #openscape

Today's the day: I'm presenting about Soundscape, Openscape, and the general class of app at the first AT confrence held by the New York Public Library. Nervus but incredibly excited. I'll post a link here in a bit. #ATNYC #soundscape #openscape

Today's the day: I'm presenting about Soundscape, Openscape, and the general class of app at the first AT confrence held by the New York Public Library. Nervus but incredibly excited. I'll post a link here in a bit. #ATNYC #soundscape #openscape

For those of you who have been itching to try out #OpenScape for #iOS, more beta slots have opened up.
You can join the #Testflight here.
https://testflight.apple.com/join/tjZ5iAPo
#Apple #Blind #A11y #Accessibility #Development #Beta

For those of you who have been itching to try out #OpenScape for #iOS, more beta slots have opened up.
You can join the #Testflight here.
https://testflight.apple.com/join/tjZ5iAPo
#Apple #Blind #A11y #Accessibility #Development #Beta

For those of you who have been itching to try out #OpenScape for #iOS, more beta slots have opened up.
You can join the #Testflight here.
https://testflight.apple.com/join/tjZ5iAPo
#Apple #Blind #A11y #Accessibility #Development #Beta

For those of you who have been itching to try out #OpenScape for #iOS, more beta slots have opened up.
You can join the #Testflight here.
https://testflight.apple.com/join/tjZ5iAPo
#Apple #Blind #A11y #Accessibility #Development #Beta

Heck yeah. Days work paying off - I just got Openscape to successfully import Soundscape’s markers and routes! #openscape #soundscape #indidev

Heck yeah. Days work paying off - I just got Openscape to successfully import Soundscape’s markers and routes! #openscape #soundscape #indidev

Heck yeah. Days work paying off - I just got Openscape to successfully import Soundscape’s markers and routes! #openscape #soundscape #indidev

Heck yeah. Days work paying off - I just got Openscape to successfully import Soundscape’s markers and routes! #openscape #soundscape #indidev

Ok, hears much better audio and you get to keep the environmental sounds that I wanted to give people. Here’s two minutes and 40 seconds demonstrating the. #OpenScape beta app. I’ll use this for my 12th #AudioMo as well! Boost for awareness please!

Ok, hears much better audio and you get to keep the environmental sounds that I wanted to give people. Here’s two minutes and 40 seconds demonstrating the. #OpenScape beta app. I’ll use this for my 12th #AudioMo as well! Boost for awareness please!

Ok, hears much better audio and you get to keep the environmental sounds that I wanted to give people. Here’s two minutes and 40 seconds demonstrating the. #OpenScape beta app. I’ll use this for my 12th #AudioMo as well! Boost for awareness please!

Ok, hears much better audio and you get to keep the environmental sounds that I wanted to give people. Here’s two minutes and 40 seconds demonstrating the. #OpenScape beta app. I’ll use this for my 12th #AudioMo as well! Boost for awareness please!

I've had a really brief play with the #OpenScape beta. So far it looks like an exact copy of #microsoft Soundscape, even referring to itself as Soundscape in some places. It's amazing to see this app continue in some form though! Does anyone know who is behind OpenScape? Would be great to know what their plans are for the future of this. #blind #a11y

I've had a really brief play with the #OpenScape beta. So far it looks like an exact copy of #microsoft Soundscape, even referring to itself as Soundscape in some places. It's amazing to see this app continue in some form though! Does anyone know who is behind OpenScape? Would be great to know what their plans are for the future of this. #blind #a11y

I've had a really brief play with the #OpenScape beta. So far it looks like an exact copy of #microsoft Soundscape, even referring to itself as Soundscape in some places. It's amazing to see this app continue in some form though! Does anyone know who is behind OpenScape? Would be great to know what their plans are for the future of this. #blind #a11y

I've had a really brief play with the #OpenScape beta. So far it looks like an exact copy of #microsoft Soundscape, even referring to itself as Soundscape in some places. It's amazing to see this app continue in some form though! Does anyone know who is behind OpenScape? Would be great to know what their plans are for the future of this. #blind #a11y

I promised another #AudioMo today, and here it is. In this AudioMo I use #OpenScape to take a abridged journey to the store. Listen, carefully, you may hear the audio from the app, it didn't come out as cleanly as I was hoping. But still! Started out on a Sure Beta, 87A into the Vocaster!
ambient sounds and traveling sounds captured with the Sennheiser AMBEO binaural Mic into the iPhone. Audio fro the other phone sent threw the Shokz OpenMove.

I promised another #AudioMo today, and here it is. In this AudioMo I use #OpenScape to take a abridged journey to the store. Listen, carefully, you may hear the audio from the app, it didn't come out as cleanly as I was hoping. But still! Started out on a Sure Beta, 87A into the Vocaster!
ambient sounds and traveling sounds captured with the Sennheiser AMBEO binaural Mic into the iPhone. Audio fro the other phone sent threw the Shokz OpenMove.

I promised another #AudioMo today, and here it is. In this AudioMo I use #OpenScape to take a abridged journey to the store. Listen, carefully, you may hear the audio from the app, it didn't come out as cleanly as I was hoping. But still! Started out on a Sure Beta, 87A into the Vocaster!
ambient sounds and traveling sounds captured with the Sennheiser AMBEO binaural Mic into the iPhone. Audio fro the other phone sent threw the Shokz OpenMove.

Just submitted the first build of #openscape, a community revival of #soundscape, a spacial audio navigation app to test flight. Then… Forgot to send this post… Oops. Anyhow I got approval.
That’s the ‘app’ part down… Now I guess the rest is development. #iosdev

Just submitted the first build of #openscape, a community revival of #soundscape, a spacial audio navigation app to test flight. Then… Forgot to send this post… Oops. Anyhow I got approval.
That’s the ‘app’ part down… Now I guess the rest is development. #iosdev

Just submitted the first build of #openscape, a community revival of #soundscape, a spacial audio navigation app to test flight. Then… Forgot to send this post… Oops. Anyhow I got approval.
That’s the ‘app’ part down… Now I guess the rest is development. #iosdev

Just submitted the first build of #openscape, a community revival of #soundscape, a spacial audio navigation app to test flight. Then… Forgot to send this post… Oops. Anyhow I got approval.
That’s the ‘app’ part down… Now I guess the rest is development. #iosdev