// For flags

CVE-2007-5637

Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities

Severity Score

4.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, y otros productos Nortel desde el IP Phone, Business Communications Manager (BCM), y otras líneas de producto permite a atacantes remotos espiar sobre el entorno físico a través de un mensaje Open Audio Stream que habilita "modo vigilante". NOTA: este asunto está relacionado con un espacio de números pequeño ID que podría apalancar para hacer más fácil el ataque.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-10-18 First Exploit
  • 2007-10-23 CVE Reserved
  • 2007-10-23 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-10-03 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
Affected Vendors, Products, and Versions
Match found for: AND_3_NODES_OR__AP_AP_AP_PART1_MIXED__VULN0_False_VULN1_False_VULN2_True
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status