Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-5638

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages. NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.

Published

2007-10-23T17:46:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200
    CWE-310
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nortel multimedia_communication_server_5100 * No
Application nortel multimedia_communication_server_5200 * No
Application nortel communications_server 1000e No
Application nortel communications_server 1000m No
Application nortel communications_server 1000s No
Application nortel communications_server 2100 No
Hardware nortel ip_audio_conference_phone_2033 * No
Hardware nortel ip_phone_1110 * No
Hardware nortel ip_phone_1120e * No
Hardware nortel ip_phone_1140e * No
Hardware nortel ip_phone_1150e * No
Hardware nortel ip_phone_2001 * No
Hardware nortel ip_phone_2002 * No
Hardware nortel ip_phone_2004 * No
Hardware nortel ip_phone_2007 * No
Hardware nortel wlan_handset_2210 * No
Hardware nortel wlan_handset_2211 * No
Hardware nortel wlan_handset_2212 * No
Hardware nortel wlan_handset_6120 * No
Hardware nortel wlan_handset_6140 * No
Application nortel business_communications_manager 50 Yes
Application nortel business_communications_manager 50a Yes
Application nortel business_communications_manager 50e Yes
Application nortel business_communications_manager 200 Yes
Application nortel business_communications_manager 400 Yes
Application nortel business_communications_manager 1000 Yes
Application nortel business_communications_manager srg50 Yes
Application nortel business_communications_manager srg200 Yes
Application nortel centrex_ip_client_manager * Yes
Application nortel centrex_ip_element_manager * Yes
Application nortel meridian_option_11c * Yes
Application nortel meridian_option_51c * Yes
Application nortel meridian_option_61c * Yes
Application nortel meridian_option_81c * Yes
Application nortel meridian_sl100 cs2100 Yes
Application nortel mobile_voice_client_2050 * Yes
References