CVE-2007-5591 The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C...
HighCVSS 7.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service (telephony application outage) via a flood of packets to Embedded LAN (ELAN) ports.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nortel meridian option 11c | All versions | No fix listed |
| nortel meridian option 51c | All versions | No fix listed |
| nortel meridian option 61c | All versions | No fix listed |
| nortel meridian option 81c | All versions | No fix listed |
| nortel voip-core-cs | = 1000e | No fix listed |
| nortel voip-core-cs | = 1000m | No fix listed |
| nortel voip-core-cs | = 1000s | No fix listed |
References
- 41799 vdb-entry
- 27282 third-party-advisory vendor-advisory
- support.nortel.com
- www.csnc.ch
- 20071018 Nortel Telephony Server Denial of Service mailing-list
- 26113 vdb-entry
- ADV-2007-3536 vdb-entry vendor-advisory
- www116.nortel.com
- nortel-cs1000-elan-dos(37252) vdb-entry