« Volver al listado

CVE-2007-1820

Estado: ModificadaAlta (9.3)—

Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove messages, or reconfigure the mailbox, by spoofing Calling Number Identification (CNID, aka Caller ID).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Nortel — CallpilotNortel — Meridian Mail

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1820",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-04-02T23:19:00.000",
  "references": [
    {
      "url": "http://osvdb.org/34983",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/726548",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/AAMN-5N2QFX",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/34983",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/726548",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/AAMN-5N2QFX",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove messages, or reconfigure the mailbox, by spoofing Calling Number Identification (CNID, aka Caller ID)."
    },
    {
      "lang": "es",
      "value": "Los sistemas de email por voz Nortel Networks CallPilot y Meridian Mail, cuando la bandeja de entrada tiene activado la auto entrada, permite a atacantes remotos recuperar o borrar mensajes, o reconfigurar la bandeja de entrada, a través de la suplantación Calling Number Identification (CNID, también conocida como Caller ID)."
    }
  ],
  "lastModified": "2026-06-16T22:38:21.597",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nortel:callpilot:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E04798A-2BBC-4955-AFA5-30B73CF55CC0"
            },
            {
              "criteria": "cpe:2.3:a:nortel:meridian_mail:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C753D176-888D-4CBA-9663-ABA81D531758"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorImpact": "Access complexity set to Medium because Nortel Networks voicemail systems do not hard code or default to this behavior.",
  "sourceIdentifier": "cve@mitre.org"
}