CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5637

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.117

EPSS Ranking 93.3%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2007-5637

Nortel » Business Communications Manager » Version: 1000

cpe:2.3:a:nortel:business_communications_manager:1000
Nortel » Business Communications Manager » Version: 200

cpe:2.3:a:nortel:business_communications_manager:200
Nortel » Business Communications Manager » Version: 400

cpe:2.3:a:nortel:business_communications_manager:400
Nortel » Business Communications Manager » Version: 50

cpe:2.3:a:nortel:business_communications_manager:50
Nortel » Business Communications Manager » Version: 50a

cpe:2.3:a:nortel:business_communications_manager:50a
Nortel » Business Communications Manager » Version: 50e

cpe:2.3:a:nortel:business_communications_manager:50e
Nortel » Business Communications Manager » Version: srg200

cpe:2.3:a:nortel:business_communications_manager:srg200
Nortel » Business Communications Manager » Version: srg50

cpe:2.3:a:nortel:business_communications_manager:srg50
Nortel » Centrex Ip Client Manager » Version: N/A

cpe:2.3:a:nortel:centrex_ip_client_manager:-
Nortel » Centrex Ip Element Manager » Version: N/A

cpe:2.3:a:nortel:centrex_ip_element_manager:-
Nortel » Communications Server » Version: 1000e

cpe:2.3:a:nortel:communications_server:1000e
Nortel » Communications Server » Version: 1000m

cpe:2.3:a:nortel:communications_server:1000m
Nortel » Communications Server » Version: 1000s

cpe:2.3:a:nortel:communications_server:1000s
Nortel » Communications Server » Version: 2100

cpe:2.3:a:nortel:communications_server:2100
Nortel » Meridian Option 11c » Version: N/A

cpe:2.3:a:nortel:meridian_option_11c:-
Nortel » Meridian Option 51c » Version: N/A

cpe:2.3:a:nortel:meridian_option_51c:-
Nortel » Meridian Option 61c » Version: N/A

cpe:2.3:a:nortel:meridian_option_61c:-
Nortel » Meridian Option 81c » Version: N/A

cpe:2.3:a:nortel:meridian_option_81c:-
Nortel » Meridian Sl100 » Version: cs2100

cpe:2.3:a:nortel:meridian_sl100:cs2100
Nortel » Mobile Voice Client 2050 » Version: N/A

cpe:2.3:a:nortel:mobile_voice_client_2050:-
Nortel » Multimedia Communication Server 5100 » Version: N/A

cpe:2.3:a:nortel:multimedia_communication_server_5100:-
Nortel » Multimedia Communication Server 5100 » Version: 3.0.13

cpe:2.3:a:nortel:multimedia_communication_server_5100:3.0.13
Nortel » Multimedia Communication Server 5200 » Version: N/A

cpe:2.3:a:nortel:multimedia_communication_server_5200:-
Nortel » Ip Audio Conference Phone 2033 » Version: N/A

cpe:2.3:h:nortel:ip_audio_conference_phone_2033:-
Nortel » Ip Phone 1110 » Version: N/A

cpe:2.3:h:nortel:ip_phone_1110:-
Nortel » Ip Phone 1120e » Version: N/A

cpe:2.3:h:nortel:ip_phone_1120e:-
Nortel » Ip Phone 1140e » Version: N/A

cpe:2.3:h:nortel:ip_phone_1140e:-
Nortel » Ip Phone 1150e » Version: N/A

cpe:2.3:h:nortel:ip_phone_1150e:-
Nortel » Ip Phone 2001 » Version: N/A

cpe:2.3:h:nortel:ip_phone_2001:-
Nortel » Ip Phone 2002 » Version: N/A

cpe:2.3:h:nortel:ip_phone_2002:-
Nortel » Ip Phone 2004 » Version: N/A

cpe:2.3:h:nortel:ip_phone_2004:-
Nortel » Ip Phone 2007 » Version: N/A

cpe:2.3:h:nortel:ip_phone_2007:-
Nortel » Wlan Handset 2210 » Version: N/A

cpe:2.3:h:nortel:wlan_handset_2210:-
Nortel » Wlan Handset 2211 » Version: N/A

cpe:2.3:h:nortel:wlan_handset_2211:-
Nortel » Wlan Handset 2212 » Version: N/A

cpe:2.3:h:nortel:wlan_handset_2212:-
Nortel » Wlan Handset 6120 » Version: N/A

cpe:2.3:h:nortel:wlan_handset_6120:-
Nortel » Wlan Handset 6140 » Version: N/A

cpe:2.3:h:nortel:wlan_handset_6140:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5637

Products

Pricing

Contact Us