Login Request a demo
Unscored severity · published Apr 27, 2007
CVE-2007-2334
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Contivity · Nortel
1000_vpn_switch; 2000_vpn_switch; 4000_vpn_switch · source: NVD
VR
Vpn Router 5000 · Nortel
All versions, or not specified · source: NVD
Affected product
CO
Contivity
Nortel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2334
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2334
osvdb.org
http://osvdb.org/35056
Patch
http://secunia.com/advisories/24962
www.securityfocus.com
http://www.securityfocus.com/bid/23562
Patch
http://www.securitytracker.com/id?1017943
www.vupen.com
http://www.vupen.com/english/advisories/2007/1464
Patch
http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null
More from Contivity
–
CVE-2007-2333
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the FIPSecryptedtest1219 and…
–
CVE-2005-2579
Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain…
–
CVE-2005-1802
Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAKMP header
–
CVE-2005-0844
Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information
–
CVE-2004-1105
Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive…