Unscored severity · published Oct 19, 2007
CVE-2007-5591
The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service (telephony application outage) via a flood of packets to Embedded LAN (ELAN) ports.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Meridian Option 11c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 51c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 61c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 81c · Nortel
All versions, or not specified · source: NVD
VO
Voip-core-cs · Nortel
1000e; 1000m; 1000s · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5591
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5591
osvdb.org
http://osvdb.org/41799
Vendor Advisory
http://secunia.com/advisories/27282
support.nortel.com
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655204
www.csnc.ch
http://www.csnc.ch/static/advisory/csnc/nortel_telephony_server_denial_of_service_v1.0.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/482484/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26113
More from Meridian Option 11c
–
CVE-2007-5637
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote…
–
CVE-2007-5638
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only…
–
CVE-2007-5640
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other…