CVE-2007-5637

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

3.13% chance of exploitation in the next 30 days, 87th percentile

Published

2007-10-23

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30679

References

• CVE Record
• NVD entry

Related

• CVE-2007-5636
• CVE-2007-5641
• CVE-2007-5633
• CVE-2007-5642
• CVE-2007-5631
• CVE-2007-5643