CVE-2007-5637 - CVE House
Back to Database
Status published Medium CVE-2007-5637

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and...

Vulnerability Description

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5637

Credits & Attribution

No credits recorded in the NVD database.

References

More from nortel

View All →
CVE-2008-6579
Nortel Communication Server 1000 4.50.x allows remote attackers to obtain...
Medium 5
CVE-2008-6578
Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow...
Critical 10
CVE-2008-6577
Nortel MG1000S, Signaling Server, and Call Server on the Communications...
Critical 10
CVE-2008-6576
Unspecified vulnerability in the "session limitation technique" in the FTP...
High 7.8
CVE-2008-6564
Nortel UNIStim protocol, as used in Communication Server 1000 and...
High 7.6

Affected Vendor

Affected Software

business communications manager, centrex ip client manager, centrex ip element manager, meridian option 11c, meridian option 51c, meridian option 61c, meridian option 81c, meridian sl100, mobile voice client 2050
Vulnerable Versions:
50, 50a, 50e, 200, 400, 1000, srg50, srg200, cs2100

Timeline

Official Publish: October 23rd, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.