« Volver al listado

CVE-2007-5639

Estado: ModificadaAlta (7.1)—

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Nortel — IP Softphone 2050Nortel — Mobile Voice Client 2050

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-5639",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-10-23T17:46:00.000",
  "references": [
    {
      "url": "http://securityreason.com/securityalert/3273",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654715",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/482480/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/26122",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37253",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/3273",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654715",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/482480/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/26122",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37253",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server."
    },
    {
      "lang": "es",
      "value": "El Nortel UNIStim IP Softphone 2050, IP Phone 1140E, y otros Nortel IP Phone, Mobile Voice Client, y productos WLAN Handsets permite a atacantes remotos provocar denegación de servicio (cuelgue del dispositivo) a travé sd eun flujo de mensajes Mute y UnMute que tienen una fuente de dirección IP falsa para el Signaling Server."
    }
  ],
  "lastModified": "2026-06-16T22:46:32.987",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nortel:ip_audio_conference_phone_2033:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F3725D9C-E702-45F8-A647-BAA86EA060C6"
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_1110:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DC7EA846-6B58-4F88-91B2-770388BE5E2C"
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_1120e:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D9593EEF-CAC3-455B-972D-5DD2FE4802C2"
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_1140e:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F1482953-C22F-4FA7-B262-52B136F578CB"
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_1150e:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "64B644B1-F5B9-4420-9908-CB4770B3F600"
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_2001:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "645B8DCD-27BB-46B2-A41E-4EBC0674AD4C"
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_2002:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D52E4B37-7699-41D0-A9B7-965A01808607"
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_2004:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BD0A3FFE-C169-4C4B-8DDD-B5EFA9ACE238"
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_2210:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C7F1EFF9-42CB-4F10-940F-E397ED56D423"
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_2211:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2A490C36-F529-4448-A8DE-BE2C74041E19"
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_2212:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D7A9DC40-0269-403C-8D86-4EE094C5493E"
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_6120:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "54772D2C-5460-4C63-A22A-DBBC497BFBA6"
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_6140:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "52D18F26-40F0-4041-95B0-6A2153DD1261"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A140A10-720D-4FF5-9559-184D9AC33509"
            },
            {
              "criteria": "cpe:2.3:a:nortel:mobile_voice_client_2050:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48E2627D-3244-4A66-9EF6-B790EEFD0D4A"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}