CVEvulnerability

CVE-2007-5638

4.3 MEDIUM Published 2007-10-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-10-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200, CWE-310

Description

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages. NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.

Affected configurations

• nortel business communications manager 50 • nortel business communications manager 50a • nortel business communications manager 50e • nortel business communications manager 200 • nortel business communications manager 400 • nortel business communications manager 1000 • nortel business communications manager srg50 • nortel business communications manager srg200 • nortel centrex ip client manager • nortel centrex ip element manager • nortel meridian option 11c • nortel meridian option 51c • nortel meridian option 61c • nortel meridian option 81c • nortel meridian sl100 cs2100 • nortel mobile voice client 2050

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References