Skip to content

CVE-2007-5637 The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdr...

MediumCVSS 4.3 EPSS 3.1%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.

Affected products

ProductAffected versionsFixed in
nortel business communications manager = 50 No fix listed
nortel business communications manager = 50a No fix listed
nortel business communications manager = 50e No fix listed
nortel business communications manager = 200 No fix listed
nortel business communications manager = 400 No fix listed
nortel business communications manager = 1000 No fix listed
nortel business communications manager = srg50 No fix listed
nortel business communications manager = srg200 No fix listed
nortel centrex ip client manager All versions No fix listed
nortel centrex ip element manager All versions No fix listed
nortel meridian option 11c All versions No fix listed
nortel meridian option 51c All versions No fix listed
nortel meridian option 61c All versions No fix listed
nortel meridian option 81c All versions No fix listed
nortel meridian sl100 = cs2100 No fix listed
nortel mobile voice client 2050 All versions No fix listed

References