CVE-2007-5637

23Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendepss 3.1%

da publicação à arma0 dias

Publicada no NVD23 de out.

1ª PoC18 de out.

probabilidade de exploração

3.1%top 13% das CVEs

exploração observada

nãonenhuma fonte reporta

1 exploit(s) público(s)

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30679

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Referências

http://osvdb.org/41769 http://secunia.com/advisories/27234 http://securityreason.com/securityalert/3272 https://exchange.xforce.ibmcloud.com/vulnerabilities/37255 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654714 http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/42/022870-01.pdf http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt http://www.securityfocus.com/archive/1/482478/100/0/threaded http://www.securityfocus.com/bid/26120