Vulnerability in Nortel Business Communications Manager
CVE-2007-5640
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.1 (High). Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.018 (78.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 79th percentile — 78.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.018 · newest: 0.018 · change: 0.000
Affected products
- Nortel Business Communications Manager — versions 50, 50a, 50e
- Nortel Centrex Ip Client Manager
- Nortel Centrex Ip Element Manager
- Nortel Communications Server — versions 1000e, 1000m, 1000s
- Nortel Ip Audio Conference Phone 2033
- Nortel Ip Phone 1110
- Nortel Ip Phone 1120e
- Nortel Ip Phone 1140e
- Nortel Ip Phone 1150e
- Nortel Ip Phone 2001
References
- support.nortel.com/go/main.jsp (Patch)
- secunia.com/advisories/27234 (Vendor Advisory, third-party-advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/37254 (vdb-entry)
- osvdb.org/41772 (vdb-entry)
- securityreason.com/securityalert/3274 (third-party-advisory)
- www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0… (Exploit)
- www.securityfocus.com/archive/1/482481/100/0/threaded (mailing-list)
- www.securityfocus.com/bid/26124 (vdb-entry)