4.3

CVE-2007-5637

Exploit

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.

Data is provided by the National Vulnerability Database (NVD)
Nortel ≫ Business Communications Manager Version50
Nortel ≫ Business Communications Manager Version50a
Nortel ≫ Business Communications Manager Version50e
Nortel ≫ Business Communications Manager Version200
Nortel ≫ Business Communications Manager Version400
Nortel ≫ Business Communications Manager Version1000
Nortel ≫ Business Communications Manager Versionsrg50
Nortel ≫ Business Communications Manager Versionsrg200
Nortel ≫ Centrex Ip Client Manager
Nortel ≫ Centrex Ip Element Manager
Nortel ≫ Meridian Option 11c
Nortel ≫ Meridian Option 51c
Nortel ≫ Meridian Option 61c
Nortel ≫ Meridian Option 81c
Nortel ≫ Meridian Sl100 Versioncs2100
Nortel ≫ Mobile Voice Client 2050
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 11.67% 0.932
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.