Nortel Business Communications Manager authentication spoofing
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
7.2 | $0-$5k | 0.00 |
A vulnerability was found in Nortel Business Communications Manager (unknown version). It has been classified as critical. Affected is an unknown code block. The manipulation with an unknown input leads to a authentication spoofing vulnerability. CWE is classifying the issue as CWE-290. This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. This is going to have an impact on availability. CVE summarizes:
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.
The weakness was presented 10/18/2007 with Compass Security (Website). The advisory is shared for download at support.nortel.com. This vulnerability is traded as CVE-2007-5640 since 10/23/2007. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available.
The vulnerability is also documented in the vulnerability database at X-Force (37254). See 39406 and 39405 for similar entries.
Product
Vendor
Name
License
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.5VulDB Meta Temp Score: 7.2
VulDB Base Score: 7.5
VulDB Temp Score: 7.2
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Authentication spoofingCWE: CWE-290 / CWE-287
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: no mitigation knownStatus: 🔍
0-Day Time: 🔍
Timeline
10/18/2007 🔍10/18/2007 🔍
10/18/2007 🔍
10/18/2007 🔍
10/23/2007 🔍
10/23/2007 🔍
03/16/2015 🔍
11/03/2017 🔍
Sources
Vendor: nortel-canada.comAdvisory: support.nortel.com
Organization: Compass Security
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2007-5640 (🔍)
X-Force: 37254 - Nortel IP Phone UNIStim re-register denial of service
SecurityFocus: 26124 - Nortel UNIStim IP Phone Remote Denial of Service Vulnerability
Secunia: 27234 - Nortel Products Multiple Vulnerabilities, Less Critical
OSVDB: 41772 - Nortel Multiple Products Signaling Server Spoofed Re-registration DoS
See also: 🔍
Entry
Created: 03/16/2015 12:18Updated: 11/03/2017 08:00
Changes: 03/16/2015 12:18 (53), 11/03/2017 08:00 (8)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.