NetSight
IP …
medium4.3Public exploit code

CVE-2007-5637

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other produc…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.

Affected products

VendorProductAffected versions
NortelBusiness Communications Manager
Versions 50, 50a, 50e, 200, 400, 1000
NortelCentrex Ip Client Manager
All versions
NortelCentrex Ip Element Manager
All versions
NortelMeridian Option 11c
All versions
NortelMeridian Option 51c
All versions
NortelMeridian Option 61c
All versions
NortelMeridian Option 81c
All versions
NortelMeridian Sl100
Version cs2100
NortelMobile Voice Client 2050
All versions

Weakness classification

CWE-200

References