Vulnerability in Nortel Ip Audio Conference Phone 2033

CVE-2007-5639

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.

EPSS: 0.018 (77.2th percentile) — read the EPSS interpretation.

Affected products

References