CVE Feed

    Dashboard / CVE / CVE-2007-5640

    CVE-2007-5640

    The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.

    Published:Oct 23, 2007
    Last Modified:Apr 23, 2026
    EPS:Oct 23, 2007
    EPSS Score:0.01172
    CVSS Score:7.1

    Affected Products

    Vendor
    Nortel
    Product
    Business Communications Manager
    Vendor
    Nortel
    Product
    Centrex Ip Client Manager
    Vendor
    Nortel
    Product
    Centrex Ip Element Manager
    Vendor
    Nortel
    Product
    Communications Server
    Vendor
    Nortel
    Product
    Ip Audio Conference Phone 2033
    Vendor
    Nortel
    Product
    Ip Phone 1110
    Vendor
    Nortel
    Product
    Ip Phone 1120e
    Vendor
    Nortel
    Product
    Ip Phone 1140e
    Vendor
    Nortel
    Product
    Ip Phone 1150e
    Vendor
    Nortel
    Product
    Ip Phone 2001
    Vendor
    Nortel
    Product
    Ip Phone 2002
    Vendor
    Nortel
    Product
    Ip Phone 2004
    Vendor
    Nortel
    Product
    Ip Phone 2007
    Vendor
    Nortel
    Product
    Meridian Option 11c
    Vendor
    Nortel
    Product
    Meridian Option 51c
    Vendor
    Nortel
    Product
    Meridian Option 61c
    Vendor
    Nortel
    Product
    Meridian Option 81c
    Vendor
    Nortel
    Product
    Meridian Sl100
    Vendor
    Nortel
    Product
    Mobile Voice Client 2050
    Vendor
    Nortel
    Product
    Multimedia Communication Server 5100
    Vendor
    Nortel
    Product
    Multimedia Communication Server 5200
    Vendor
    Nortel
    Product
    Wlan Handset 2210
    Vendor
    Nortel
    Product
    Wlan Handset 2211
    Vendor
    Nortel
    Product
    Wlan Handset 2212
    Vendor
    Nortel
    Product
    Wlan Handset 6120
    Vendor
    Nortel
    Product
    Wlan Handset 6140

    Exploits

    http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txthttp://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://osvdb.org/41772
    http://secunia.com/advisories/27234
    http://securityreason.com/securityalert/3274
    http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654641
    http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt
    http://www.securityfocus.com/archive/1/482481/100/0/threaded
    http://www.securityfocus.com/bid/26124
    https://exchange.xforce.ibmcloud.com/vulnerabilities/37254
    http://osvdb.org/41772
    http://secunia.com/advisories/27234
    http://securityreason.com/securityalert/3274
    http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654641
    http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt
    http://www.securityfocus.com/archive/1/482481/100/0/threaded
    http://www.securityfocus.com/bid/26124
    https://exchange.xforce.ibmcloud.com/vulnerabilities/37254

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High