CVE-2007-2334 Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which all...
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nortel contivity | = 1000_vpn_switch | No fix listed |
| nortel contivity | = 2000_vpn_switch | No fix listed |
| nortel contivity | = 4000_vpn_switch | No fix listed |
| nortel vpn router 5000 | All versions | No fix listed |
References
- 35056 vdb-entry
- 24962 patch third-party-advisory vendor-advisory
- 23562 vdb-entry
- 1017943 patch vdb-entry
- ADV-2007-1464 vdb-entry
- www130.nortelnetworks.com patch vendor-advisory