CVE-2007-5640: nortel business_communications_manager
Vulnerability summary
CVE-2007-5640 is a high (CVSS 7.1) vulnerability in nortel business_communications_manager. EPSS estimates a 1.82% chance of exploitation in the next 30 days, higher than 78.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 23-10-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.82%
Chance of exploitation in the next 30 days
Percentile
78%
Versus all other CVEs
30-day change
0.00 pp
From 1.82% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (csnc.ch)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Nortel2 products
- business_communications_manager50 | 50a | 50e | 200 | 400 | 1000 | srg50 | srg200
- meridian_sl100cs2100
1 vendor · 2 products
References
8 links- www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txtX Refsource MISCExploit