CVE-2007-2334 - CVE House
Back to Database
Status published High CVE-2007-2334

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000...

Vulnerability Description

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2334

Credits & Attribution

No credits recorded in the NVD database.

References

More from nortel

View All →
CVE-2008-6579
Nortel Communication Server 1000 4.50.x allows remote attackers to obtain...
Medium 5
CVE-2008-6578
Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow...
Critical 10
CVE-2008-6577
Nortel MG1000S, Signaling Server, and Call Server on the Communications...
Critical 10
CVE-2008-6576
Unspecified vulnerability in the "session limitation technique" in the FTP...
High 7.8
CVE-2008-6564
Nortel UNIStim protocol, as used in Communication Server 1000 and...
High 7.6

Affected Vendor

Affected Software

contivity, vpn router 5000
Vulnerable Versions:
1000_vpn_switch, 2000_vpn_switch, 4000_vpn_switch

Timeline

Official Publish: April 27th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.