CVE-2007-5637 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 3.1% (pctl 87)
Patch early
A public exploit exists.
Description
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
| EPSS | 3.13% — more likely to be exploited than 87% of all CVEs |
| Weakness | CWE-200 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-10-23 |
| Last modified | 2026-06-16 |
Affected (26)
| Vendor | Product |
|---|---|
| nortel | business communications manager |
| nortel | centrex ip client manager |
| nortel | centrex ip element manager |
| nortel | communications server |
| nortel | ip audio conference phone 2033 |
| nortel | ip phone 1110 |
| nortel | ip phone 1120e |
| nortel | ip phone 1140e |
| nortel | ip phone 1150e |
| nortel | ip phone 2001 |
| nortel | ip phone 2002 |
| nortel | ip phone 2004 |
| nortel | ip phone 2007 |
| nortel | meridian option 11c |
| nortel | meridian option 51c |
| nortel | meridian option 61c |
| nortel | meridian option 81c |
| nortel | meridian sl100 |
| nortel | mobile voice client 2050 |
| nortel | multimedia communication server 5100 |
| nortel | multimedia communication server 5200 |
| nortel | wlan handset 2210 |
| nortel | wlan handset 2211 |
| nortel | wlan handset 2212 |
| nortel | wlan handset 6120 |
| nortel | wlan handset 6140 |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities | 2007-10-18 |
References
- http://osvdb.org/41769
- http://secunia.com/advisories/27234
- http://securityreason.com/securityalert/3272
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654714
- http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt
- http://www.securityfocus.com/archive/1/482478/100/0/threaded
- http://www.securityfocus.com/bid/26120
- http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/42/022870-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37255
- http://osvdb.org/41769
- http://secunia.com/advisories/27234
- http://securityreason.com/securityalert/3272
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654714
- http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt
- http://www.securityfocus.com/archive/1/482478/100/0/threaded
- http://www.securityfocus.com/bid/26120
- http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/42/022870-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37255
→ the Explorer · watch your stack · NVD