4.3

CVE-2007-5638

Exploit
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages.  NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nortel ≫ Business Communications Manager Version 50
Nortel ≫ Business Communications Manager Version 50a
Nortel ≫ Business Communications Manager Version 50e
Nortel ≫ Business Communications Manager Version 200
Nortel ≫ Business Communications Manager Version 400
Nortel ≫ Business Communications Manager Version 1000
Nortel ≫ Business Communications Manager Version srg50
Nortel ≫ Business Communications Manager Version srg200
Nortel ≫ Centrex Ip Client Manager
Nortel ≫ Centrex Ip Element Manager
Nortel ≫ Meridian Option 11c
Nortel ≫ Meridian Option 51c
Nortel ≫ Meridian Option 61c
Nortel ≫ Meridian Option 81c
Nortel ≫ Meridian Sl100 Version cs2100
Nortel ≫ Mobile Voice Client 2050
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.47% 0.704
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://secunia.com/advisories/27234
Patch
Vendor Advisory
http://securityreason.com/securityalert/3272
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt
Exploit
http://www.securityfocus.com/archive/1/482478/100/0/threaded
http://www.securityfocus.com/bid/26120
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/37255
http://osvdb.org/41770
https://exchange.xforce.ibmcloud.com/vulnerabilities/42881