CVE-2008-5871

EPSS 1.04%
Published 08.01.2009 18:30:04
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Nortel ≫ Multimedia Communication Server 5100 Version3.0.13

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.04%	0.754

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P

http://secunia.com/advisories/32203

Vendor Advisory

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223

http://voipshield.com/research-details.php?id=119

http://www.securityfocus.com/bid/31640

http://www.vupen.com/english/advisories/2008/2779

https://exchange.xforce.ibmcloud.com/vulnerabilities/45752

https://nvd.nist.gov/vuln/detail/CVE-2008-5871

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5871

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5871

EUVD