7.1

CVE-2007-5640

Exploit

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone.  NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nortel ≫ Business Communications Manager Version50
Nortel ≫ Business Communications Manager Version50a
Nortel ≫ Business Communications Manager Version50e
Nortel ≫ Business Communications Manager Version200
Nortel ≫ Business Communications Manager Version400
Nortel ≫ Business Communications Manager Version1000
Nortel ≫ Business Communications Manager Versionsrg50
Nortel ≫ Business Communications Manager Versionsrg200
Nortel ≫ Centrex Ip Client Manager
Nortel ≫ Centrex Ip Element Manager
Nortel ≫ Meridian Option 11c
Nortel ≫ Meridian Option 51c
Nortel ≫ Meridian Option 61c
Nortel ≫ Meridian Option 81c
Nortel ≫ Meridian Sl100 Versioncs2100
Nortel ≫ Mobile Voice Client 2050
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.17% 0.767
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:N/I:N/A:C