Nortel Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	36
Router Operating System	6
Network Encryption Software	4
IP Phone Software	2
Firewall Software	2

Product

Nortel Business Communications Manager	4
Nortel CS1000	4
Nortel Meridian Mail	2
Nortel VPN Router	2
LG-Nortel ELO GS24M switch	2

Remediation

Official Fix	28
Temporary Fix	0
Workaround	6
Unavailable	6
Not Defined	10

Exploitability

High	0
Functional	2
Proof-of-Concept	18
Unproven	8
Not Defined	22

Access Vector

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	48

Authentication

Not Defined	0
High	0
Low	6
None	44

User Interaction

Not Defined	0
Required	0
None	50

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	14
≤7	0
≤8	24
≤9	4
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	8
≤7	16
≤8	12
≤9	0
≤10	6

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	14
≤7	0
≤8	24
≤9	4
≤10	6

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	16
<5k	22
<10k	4
<25k	4
<50k	0
<100k	2
≥100k	0

Exploit Today

<1k	48
<2k	0
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (35): Alteon ACEdirector (1), Baystack Switch (1), Business Communications Manager (3), CS1000 (4), CVX 1800 Multi-Service Access Switch (1), Callpilot Server (1), Communication Server 1000 (1), Contivity (5), Contivity VPN Client (3), ELO GS24M switch (1), IP Softphone 2050 (2), Media Communication Server 5100 (1), Meridian CS 1000 (1), Meridian Mail (1), Multimedia Communication Server 5100 (2), Multimedia Communications Server (1), Nautica Marlin (1), Net Direct (1), Optivity Net Architect (1), Pc Client Soft Phone Sip (1), Phone Switch (1), Router (1), Router Manager (1), SIP Multimedia PC Client (1), SSL VPN (1), Sip Softphone (1), Succession Communication Server 1000 (1), Succession Communication Server 2000 (1), Switched Firewall (1), Threat Protection (1), UNIStim IP Phone (1), VPN Router (2), VoIP-Core-CS (1), Vpn Router 1700 (1), WLAN Access Point (1)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
03/22/2012	5.3	5.3	LG-Nortel ELO GS24M switch Web Management Interface improper authentication	Unknown	Not Defined	Not Defined	0.00722	0.02	CVE-2012-1838
01/08/2009	7.5	6.5	Nortel Multimedia Communication Server 5100 input validation	Unknown	Proof-of-Concept	Official Fix	0.02279	0.07	CVE-2008-5872
01/08/2009	6.5	5.7	Nortel Multimedia Communication Server 5100 credentials management	Unknown	Proof-of-Concept	Official Fix	0.00646	0.00	CVE-2008-5871
11/07/2008	7.5	6.6	Nortel UNIStim IP Phone input validation	IP Phone Software	Unproven	Unavailable	0.12728	0.00	CVE-2008-4999
07/11/2008	5.3	4.9	Nortel SIP Multimedia PC Client resource management	IP Phone Software	Proof-of-Concept	Unavailable	0.00478	0.00	CVE-2008-3157
05/14/2008	5.3	4.6	Nortel Multimedia Communications Server memory corruption	Unknown	Proof-of-Concept	Official Fix	0.03900	0.00	CVE-2008-2218
04/14/2008	5.3	4.7	Nortel CS1000 information disclosure	Unknown	Unproven	Unavailable	0.00508	0.00	CVE-2008-6579
04/14/2008	9.8	8.5	Nortel CS1000 privileges management	Unknown	Unproven	Official Fix	0.02056	0.00	CVE-2008-6578
04/14/2008	9.8	8.5	Nortel CS1000 credentials management	Unknown	Unproven	Official Fix	0.01705	0.00	CVE-2008-6577
04/14/2008	7.5	6.6	Nortel CS1000 FTP Service denial of service	Unknown	Unproven	Unavailable	0.03257	0.02	CVE-2008-6576

39 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 39 results.

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!