Nortel vulnerabilities, page 2
33 vulnerabilities
Known vulnerabilities in Nortel products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 70 products.
CVE-2008-6579nortelcs1000
EPSS score1.49%
Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators."CVE-2008-6577nortelcs1000EPSS score2.65%
Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows remote attackers to gain privileges.CVE-2008-6576nortelcs1000EPSS score1.98%
Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service (resource exhaustion and failed updates) via unknown vectors that causes consumption of all available sessions.CVE-2008-3157nortelsip_multimedia_pc_clientEPSS score1.42%
Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service (resource consumption) via a large number of sessions.CVE-2000-0009norteloptivity_net_architectEPSS score0.82%
The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands.CVE-2000-0064nortelcontivityEPSS score1.29%
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters.CVE-2000-0063nortelcontivityEPSS score1.36%
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.CVE-2004-2621nortelcontivityEPSS score0.75%
Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the user, which creates a race condition that allows remote attackers to perform a man-in-the-middle (MITM) attack.CVE-2004-1305microsoftwindows_2003_server+3EPSS score58.58%
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.CVE-2004-1105nortelcontivityEPSS score2.04%
Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.CVE-2002-0540nortelcvx_1800_multi-service_access_switchEPSS score19.90%
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration.CVE-2002-0209nortelalteon_acedirectorEPSS score3.32%
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address.CVE-2006-6670nortelcallpilot_serverEPSS score1.63%
Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL.