Login Request a demo
Unscored severity · published Oct 23, 2007
CVE-2007-5640
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BC
Business Communications Manager · Nortel
50; 50a; 50e; 200; 400; 1000; +2 more · source: NVD
CI
Centrex IP Client Manager · Nortel
All versions, or not specified · source: NVD
CI
Centrex IP Element Manager · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 11c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 51c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 61c · Nortel
All versions, or not specified · source: NVD
MO
Meridian Option 81c · Nortel
All versions, or not specified · source: NVD
MS
Meridian Sl100 · Nortel
cs2100 · source: NVD
MV
Mobile Voice Client 2050 · Nortel
All versions, or not specified · source: NVD
Affected product
BC
Business Communications Manager
Nortel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5640
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5640
osvdb.org
http://osvdb.org/41772
Vendor Advisory
http://secunia.com/advisories/27234
securityreason.com
http://securityreason.com/securityalert/3274
Patch
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654641
Exploit
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/482481/100/0/threaded
More from Business Communications Manager
–
CVE-2007-5637
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote…
–
CVE-2007-5638
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only…
–
CVE-2005-0356
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service…
–
CVE-2004-0056
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and…