Unscored severity · published Oct 23, 2007
CVE-2007-5638
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only…
–
CVSS
1.5%
EPSS
No
On KEV
Description
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages. NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BC
Business Communications Manager · Nortel
50; 50a; 50e; 200; 400; 1000; +2 more · source: NVD
CI
Centrex IP Client Manager · Nortel
All versions, or not specified · source: NVD
CI
Centrex IP Element Manager · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 11c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 51c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 61c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 81c · Nortel
All versions, or not specified · source: NVD
MS
Meridian Sl100 · Nortel
cs2100 · source: NVD
MV
Mobile Voice Client 2050 · Nortel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5638
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5638
osvdb.org
http://osvdb.org/41770
Patch
http://secunia.com/advisories/27234
securityreason.com
http://securityreason.com/securityalert/3272
Exploit
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/482478/100/0/threaded
Exploit
http://www.securityfocus.com/bid/26120
More from Business Communications Manager
–
CVE-2007-5637
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote…
–
CVE-2007-5640
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other…
–
CVE-2005-0356
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service…
–
CVE-2004-0056
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and…