Login Request a demo
Unscored severity · published Oct 23, 2007
CVE-2007-5637
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote…
–
CVSS
3.1%
EPSS
No
On KEV
Description
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BC
Business Communications Manager · Nortel
50; 50a; 50e; 200; 400; 1000; +2 more · source: NVD
CI
Centrex IP Client Manager · Nortel
All versions, or not specified · source: NVD
CI
Centrex IP Element Manager · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 11c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 51c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 61c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 81c · Nortel
All versions, or not specified · source: NVD
MS
Meridian Sl100 · Nortel
cs2100 · source: NVD
MV
Mobile Voice Client 2050 · Nortel
All versions, or not specified · source: NVD
Affected product
BC
Business Communications Manager
Nortel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5637
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5637
osvdb.org
http://osvdb.org/41769
Vendor Advisory
http://secunia.com/advisories/27234
securityreason.com
http://securityreason.com/securityalert/3272
Patch
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654714
www.csnc.ch
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/482478/100/0/threaded
More from Business Communications Manager
–
CVE-2007-5638
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only…
–
CVE-2007-5640
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other…
–
CVE-2005-0356
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service…
–
CVE-2004-0056
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and…