4.3

CVE-2007-5638

Exploit

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages.  NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nortel ≫ Business Communications Manager Version50
Nortel ≫ Business Communications Manager Version50a
Nortel ≫ Business Communications Manager Version50e
Nortel ≫ Business Communications Manager Version200
Nortel ≫ Business Communications Manager Version400
Nortel ≫ Business Communications Manager Version1000
Nortel ≫ Business Communications Manager Versionsrg50
Nortel ≫ Business Communications Manager Versionsrg200
Nortel ≫ Centrex Ip Client Manager
Nortel ≫ Centrex Ip Element Manager
Nortel ≫ Meridian Option 11c
Nortel ≫ Meridian Option 51c
Nortel ≫ Meridian Option 61c
Nortel ≫ Meridian Option 81c
Nortel ≫ Meridian Sl100 Versioncs2100
Nortel ≫ Mobile Voice Client 2050
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.666
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.