Login Request a demo
NO
Vendor
Nortel
70 products with CVEs on record
127
CVEs
0
On KEV
0
New 30D
Products
CO
Contivity
Nortel
–
9 CVEs0 on KEV0 new
MV
Mobile Voice Client 2050
Nortel
–
6 CVEs0 on KEV0 new
BC
Business Communications Manager
Nortel
–
5 CVEs0 on KEV0 new
IS
IP Softphone 2050
Nortel
–
5 CVEs0 on KEV0 new
CS
Cs1000
Nortel
–
4 CVEs0 on KEV0 new
MO
Meridian Option 11c
Nortel
–
4 CVEs0 on KEV0 new
MO
Meridian Option 51c
Nortel
–
4 CVEs0 on KEV0 new
MO
Meridian Option 61c
Nortel
–
4 CVEs0 on KEV0 new
MO
Meridian Option 81c
Nortel
–
4 CVEs0 on KEV0 new
VR
Vpn Router 5000
Nortel
–
4 CVEs0 on KEV0 new
CI
Centrex IP Client Manager
Nortel
–
3 CVEs0 on KEV0 new
CI
Centrex IP Element Manager
Nortel
–
3 CVEs0 on KEV0 new
MS
Meridian Sl100
Nortel
–
3 CVEs0 on KEV0 new
CA
Callpilot
Nortel
–
2 CVEs0 on KEV0 new
MC
Multimedia Communication Server 5100
Nortel
–
2 CVEs0 on KEV0 new
OT
Optivity Telephony Manager
Nortel
–
2 CVEs0 on KEV0 new
SC
Succession Communication Server 1000
Nortel
–
2 CVEs0 on KEV0 new
SW
Symposium Web Centre Portal
Nortel
–
2 CVEs0 on KEV0 new
SW
Symposium Web Client
Nortel
–
2 CVEs0 on KEV0 new
VR
Vpn Router 1010
Nortel
–
2 CVEs0 on KEV0 new
VR
Vpn Router 1050
Nortel
–
2 CVEs0 on KEV0 new
VR
Vpn Router 1100
Nortel
–
2 CVEs0 on KEV0 new
VR
Vpn Router 1700
Nortel
–
2 CVEs0 on KEV0 new
VR
Vpn Router 1740
Nortel
–
2 CVEs0 on KEV0 new
VR
Vpn Router 2700
Nortel
–
2 CVEs0 on KEV0 new
7W
7220 Wlan Access Point
Nortel
–
1 CVEs0 on KEV0 new
7W
7250 Wlan Access Point
Nortel
–
1 CVEs0 on KEV0 new
8W
802.11 Wireless IP Gateway
Nortel
–
1 CVEs0 on KEV0 new
AA
Alteon Acedirector
Nortel
–
1 CVEs0 on KEV0 new
CS
Callpilot Server
Nortel
–
1 CVEs0 on KEV0 new
CS
Communication Server 1000
Nortel
–
1 CVEs0 on KEV0 new
CS
Communications Server
Nortel
–
1 CVEs0 on KEV0 new
CC
Contact Center
Nortel
–
1 CVEs0 on KEV0 new
C1
Cvx 1800 Multi-service Access Switch
Nortel
–
1 CVEs0 on KEV0 new
ER
Ethernet Routing Switch 1612
Nortel
–
1 CVEs0 on KEV0 new
ER
Ethernet Routing Switch 1624
Nortel
–
1 CVEs0 on KEV0 new
ER
Ethernet Routing Switch 1648
Nortel
–
1 CVEs0 on KEV0 new
MC
Media Communication Server 5100
Nortel
–
1 CVEs0 on KEV0 new
MC
Media Communication Server 5200
Nortel
–
1 CVEs0 on KEV0 new
MP
Media Processing Server
Nortel
–
1 CVEs0 on KEV0 new
MM
Meridian Mail
Nortel
–
1 CVEs0 on KEV0 new
MC
Multimedia Communications Server
Nortel
–
1 CVEs0 on KEV0 new
NM
Nautica Marlin
Nortel
–
1 CVEs0 on KEV0 new
ND
Net Direct Client
Nortel
–
1 CVEs0 on KEV0 new
OM
Optical Metro 5000
Nortel
–
1 CVEs0 on KEV0 new
OM
Optical Metro 5100
Nortel
–
1 CVEs0 on KEV0 new
OM
Optical Metro 5200
Nortel
–
1 CVEs0 on KEV0 new
ON
Optivity Net Architect
Nortel
–
1 CVEs0 on KEV0 new
PC
PC Client Soft Phone Sip
Nortel
–
1 CVEs0 on KEV0 new
PE
Periphonics
Nortel
–
1 CVEs0 on KEV0 new
SM
Sip Multimedia PC Client
Nortel
–
1 CVEs0 on KEV0 new
SS
Sip Softphone
Nortel
–
1 CVEs0 on KEV0 new
SV
Ssl Vpn
Nortel
–
1 CVEs0 on KEV0 new
SC
Succession Communication Server 2000
Nortel
–
1 CVEs0 on KEV0 new
SR
Survivable Remote Gateway
Nortel
–
1 CVEs0 on KEV0 new
SA
Symposium Agent
Nortel
–
1 CVEs0 on KEV0 new
SC
Symposium Call Center Server
Nortel
–
1 CVEs0 on KEV0 new
SE
Symposium Express Call Center
Nortel
–
1 CVEs0 on KEV0 new
SN
Symposium Network Control Center
Nortel
–
1 CVEs0 on KEV0 new
ST
Symposium Tapi Service Provider
Nortel
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2008-6579
CS
Cs1000
Nortel
–
1%
Apr 1Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators."
CVE-2008-6578
CS
Cs1000
Nortel
–
3%
Apr 1Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive…
CVE-2008-6577
CS
Cs1000
Nortel
–
3%
Apr 1Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows…
CVE-2008-6576
CS
Cs1000
Nortel
–
2%
Apr 1Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes,…
CVE-2008-6564
CS
Communication Server 1000
Nortel
–
2%
Mar 31Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing…
CVE-2008-5872
MC
Multimedia Communication Server 5100
Nortel
–
2%
Jan 8Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100…
CVE-2008-5871
MC
Multimedia Communication Server 5100
Nortel
–
2%
Jan 8Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls,…
CVE-2008-4999
UI
Unistim IP Phone
Nortel
–
4%
Nov 7Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death")
CVE-2008-3157
SM
Sip Multimedia PC Client
Nortel
–
1%
Jul 11Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service (resource…
CVE-2008-2218
MC
Multimedia Communications Server
Nortel
–
2%
May 14Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS) before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a…
CVE-2007-5637
BC
Business Communications Manager
Nortel
–
3%
Oct 23The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote…
CVE-2007-5640
BC
Business Communications Manager
Nortel
–
2%
Oct 23The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other…
CVE-2007-5639
IS
IP Softphone 2050
Nortel
–
2%
Oct 23The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of…
CVE-2007-5638
BC
Business Communications Manager
Nortel
–
1%
Oct 23The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only…
CVE-2007-5636
IS
IP Softphone 2050
Nortel
–
7%
Oct 23Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of…
CVE-2007-5591
MO
Meridian Option 11c
Nortel
–
2%
Oct 19The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and…
CVE-2007-3438
SS
Sip Softphone
Nortel
–
2%
Jun 27Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbitrary code via a malformed…
CVE-2007-3361
PC
PC Client Soft Phone Sip
Nortel
–
2%
Jun 22The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device crash) via a SIP message with a malformed header
CVE-2007-2886
CS
Communications Server
Nortel
–
2%
May 30Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers…
CVE-2007-2332
VR
Vpn Router 1010
Nortel
–
2%
Apr 27Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a…
CVE-2007-2333
CO
Contivity
Nortel
–
3%
Apr 27Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the FIPSecryptedtest1219 and…
CVE-2007-2334
CO
Contivity
Nortel
–
2%
Apr 27Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain…
CVE-2007-1820
CA
Callpilot
Nortel
–
2%
Apr 2Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove messages, or reconfigure the…
CVE-2007-1057
ND
Net Direct Client
Nortel
–
1%
Feb 21The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions,…
CVE-2006-6670
CS
Callpilot Server
Nortel
–
2%
Dec 20Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL
CVE-2005-4197
SV
Ssl Vpn
Nortel
–
12%
Dec 13tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is executed with extra privileges in a…
CVE-2005-2579
CO
Contivity
Nortel
–
0%
Aug 16Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain…
CVE-2005-0356
BC
Business Communications Manager
Nortel
–
83%
May 31Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service…
CVE-2005-1802
CO
Contivity
Nortel
–
2%
May 27Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAKMP header
CVE-2005-0844
CO
Contivity
Nortel
–
0%
May 2Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information
CVE-2004-1105
CO
Contivity
Nortel
–
2%
Jan 10Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive…
CVE-2004-2549
WA
Wlan Access Point 2220
Nortel
–
10%
Dec 31Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string,…
CVE-2004-2621
CO
Contivity
Nortel
–
1%
Dec 31Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the…
CVE-2004-1305
IS
IP Softphone 2050
Nortel
–
59%
Dec 23The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service…
CVE-2004-1319
IS
IP Softphone 2050
Nortel
–
27%
Dec 15The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is…
CVE-2004-0839
IS
IP Softphone 2050
Nortel
–
34%
Aug 18Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and…
CVE-2004-0056
BC
Business Communications Manager
Nortel
–
4%
Feb 17Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and…
CVE-2003-1115
SC
Succession Communication Server 2000
Nortel
–
5%
Dec 31The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of…
CVE-2002-0540
C1
Cvx 1800 Multi-service Access Switch
Nortel
–
20%
Jul 3Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration
CVE-2002-0209
AA
Alteon Acedirector
Nortel
–
3%
May 16Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address…
CVE-2000-0221
NM
Nautica Marlin
Nortel
–
5%
Feb 25The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port
CVE-2000-0064
CO
Contivity
Nortel
–
1%
Jan 17cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters
CVE-2000-0063
CO
Contivity
Nortel
–
1%
Jan 17cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script
CVE-2000-0009
ON
Optivity Net Architect
Nortel
–
1%
Dec 29The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands