{"schemaVersion":3,"id":"CVE-2007-5638","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages.  NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.","dates":{"published":"2007-10-23T17:00:00.000Z","modified":"2024-08-07T15:39:13.714Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01473,"percentile":0.7341,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01473},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01473,"percentile":0.7341}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01473,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01473,"percentile":0.7341}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_1255B9A5A764E9F7","name":"Exploit Reference (csnc.ch)","source":"reference","url":"http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_6789D82EC7D468E5","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/bid/26120","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"},{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"nortel","product":"business_communications_manager","name":"business communications manager","label":"business_communications_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"50","noFixRecorded":false,"fixedIn":null},{"text":"50a","noFixRecorded":false,"fixedIn":null},{"text":"50e","noFixRecorded":false,"fixedIn":null},{"text":"200","noFixRecorded":false,"fixedIn":null},{"text":"400","noFixRecorded":false,"fixedIn":null},{"text":"1000","noFixRecorded":false,"fixedIn":null},{"text":"srg50","noFixRecorded":false,"fixedIn":null},{"text":"srg200","noFixRecorded":false,"fixedIn":null}],"versionsText":"50 | 50a | 50e | 200 | 400 | 1000 | srg50 | srg200","eol":null,"hubHref":"/vendor/nortel/business_communications_manager"},{"vendor":"nortel","product":"meridian_sl100","name":"meridian sl100","label":"meridian_sl100","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"cs2100","noFixRecorded":false,"fixedIn":null}],"versionsText":"cs2100","eol":null,"hubHref":"/vendor/nortel/meridian_sl100"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37255","label":"exchange.xforce.ibmcloud.com/vulnerabilities/37255","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://secunia.com/advisories/27234","label":"secunia.com/advisories/27234","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://osvdb.org/41770","label":"osvdb.org/41770","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt","label":"www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt","hostname":"www.csnc.ch","tags":["X Refsource MISC","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42881","label":"exchange.xforce.ibmcloud.com/vulnerabilities/42881","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://securityreason.com/securityalert/3272","label":"securityreason.com/securityalert/3272","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://www.securityfocus.com/archive/1/482478/100/0/threaded","label":"www.securityfocus.com/archive/1/482478/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.securityfocus.com/bid/26120","label":"www.securityfocus.com/bid/26120","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Exploit"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2007-10-23T17:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T15:39:13.714Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":27,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T10:40:19.627Z","stale":false,"partial":false}}