Unscored severity · published Apr 2, 2007
CVE-2007-1820
Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove messages, or reconfigure the…
–
CVSS
2%
EPSS
No
On KEV
Description
Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove messages, or reconfigure the mailbox, by spoofing Calling Number Identification (CNID, aka Caller ID).
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Callpilot · Nortel
All versions, or not specified · source: NVD
MM
Meridian Mail · Nortel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1820
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1820
osvdb.org
http://osvdb.org/34983
US Government Resource
http://www.kb.cert.org/vuls/id/726548
www.kb.cert.org
http://www.kb.cert.org/vuls/id/AAMN-5N2QFX
More from Callpilot
–
CVE-2005-0356
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service…