Записи nortel
44 опубликованных записей вендора nortel.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 6
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-20 Improper Input Validation2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-255 Credentials Management Errors2
- CWE-310 Cryptographic Issues1
- CWE-399 Resource Management Errors1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
44 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
45В плане | CVE-2005-0356Proof of concept | Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackecisco · agent desktop | Средняя5,0 | — | 82,7 % | 31 мая 2005 г. |
41В плане | CVE-2008-6578Эксплойта нет | Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gainnortel · cs1000 | Критическая10,0 | — | 3,3 % | 1 апр. 2009 г. |
41В плане | CVE-2008-6577Эксплойта нет | Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded acnortel · cs1000 · CWE-255 | Критическая10,0 | — | 2,6 % | 1 апр. 2009 г. |
41В плане | CVE-2007-2333Эксплойта нет | Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes thenortel · contivity | Критическая10,0 | — | 2,5 % | 27 апр. 2007 г. |
40В плане | CVE-2006-6670Эксплойта нет | Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL.nortel · callpilot server | Критическая10,0 | — | 1,6 % | 20 дек. 2006 г. |
38Наблюдать | CVE-2004-1305Proof of concept | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote nortel · ip softphone 2050 | Средняя5,0 | — | 58,5 % | 23 дек. 2004 г. |
38Наблюдать | CVE-2007-1820Эксплойта нет | Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or nortel · callpilot | Критическая9,3 | — | 2,1 % | 2 апр. 2007 г. |
37Наблюдать | CVE-2007-2332Эксплойта нет | Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote nortel · vpn router 1010 | Критическая9,0 | — | 1,7 % | 27 апр. 2007 г. |
36Наблюдать | CVE-2002-0540Proof of concept | Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modnortel · cvx 1800 multi-service access switch | Высокая7,5 | — | 19,9 % | 3 июл. 2002 г. |
34Наблюдать | CVE-2005-4197Proof of concept | tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is execnortel · ssl vpn | Высокая7,5 | — | 11,8 % | 13 дек. 2005 г. |
32Наблюдать | CVE-2007-5636Proof of concept | Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possiblnortel · ip softphone 2050 · CWE-119 | Высокая7,5 | — | 6,6 % | 23 окт. 2007 г. |
32Наблюдать | CVE-2008-4999Proof of concept | Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of deathnortel · unistim ip phone · CWE-20 | Высокая7,8 | — | 3,8 % | 7 нояб. 2008 г. |
32Наблюдать | CVE-2007-3438Эксплойта нет | Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to exenortel · sip softphone | Высокая7,8 | — | 2,4 % | 26 июн. 2007 г. |
32Наблюдать | CVE-2007-5591Эксплойта нет | The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-nortel · communications server | Высокая7,8 | — | 2,2 % | 19 окт. 2007 г. |
32Наблюдать | CVE-2008-6576Эксплойта нет | Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when nortel · cs1000 | Высокая7,8 | — | 1,9 % | 1 апр. 2009 г. |
32Наблюдать | CVE-2008-5872Эксплойта нет | Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedinortel · multimedia communication server 5100 · CWE-20 | Высокая7,8 | — | 1,9 % | 8 янв. 2009 г. |
32Наблюдать | CVE-2007-3361Эксплойта нет | The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device crash) via a SIP messnortel · pc client soft phone sip | Высокая7,8 | — | 1,9 % | 22 июн. 2007 г. |
31Наблюдать | CVE-2003-1115Эксплойта нет | The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remotnortel · succession communication server 2000 | Высокая7,5 | — | 4,6 % | 31 дек. 2003 г. |
31Наблюдать | CVE-2004-0056Эксплойта нет | Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP nortel · business communications manager | Высокая7,5 | — | 3,8 % | 17 февр. 2004 г. |
31Наблюдать | CVE-2008-6564Эксплойта нет | Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attnortel · communication server 1000 | Высокая7,6 | — | 2,2 % | 31 мар. 2009 г. |
30Наблюдать | CVE-2004-0839Эксплойта нет | Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a avaya · ip600 media servers | Средняя5,0 | — | 33,9 % | 18 авг. 2004 г. |
30Наблюдать | CVE-2007-2334Эксплойта нет | Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two tempnortel · contivity | Высокая7,5 | — | 1,6 % | 27 апр. 2007 г. |
29Наблюдать | CVE-2007-5640Эксплойта нет | The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCMnortel · multimedia communication server 5100 | Высокая7,1 | — | 1,8 % | 23 окт. 2007 г. |
29Наблюдать | CVE-2007-5639Эксплойта нет | The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remotnortel · ip audio conference phone 2033 | Высокая7,1 | — | 1,7 % | 23 окт. 2007 г. |
28Наблюдать | CVE-2004-1319Эксплойта нет | The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windonortel · ip softphone 2050 | Средняя5,0 | — | 26,9 % | 15 дек. 2004 г. |
- CVE-2005-035645В плане
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attacke
СредняяCVSS 5,0Proof of conceptEPSS 82 %cisco · agent desktop31 мая 2005 г.
- CVE-2008-657841В плане
Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain
КритическаяCVSS 10,0Эксплойта нетEPSS 3 %nortel · cs10001 апр. 2009 г.
- CVE-2008-657741В плане
Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded ac
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %nortel · cs10001 апр. 2009 г.
- CVE-2007-233341В плане
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %nortel · contivity27 апр. 2007 г.
- CVE-2006-667040В плане
Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL.
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %nortel · callpilot server20 дек. 2006 г.
- CVE-2004-130538Наблюдать
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote
СредняяCVSS 5,0Proof of conceptEPSS 58 %nortel · ip softphone 205023 дек. 2004 г.
- CVE-2007-182038Наблюдать
Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or
КритическаяCVSS 9,3Эксплойта нетEPSS 2 %nortel · callpilot2 апр. 2007 г.
- CVE-2007-233237Наблюдать
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote
КритическаяCVSS 9,0Эксплойта нетEPSS 1 %nortel · vpn router 101027 апр. 2007 г.
- CVE-2002-054036Наблюдать
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and mod
ВысокаяCVSS 7,5Proof of conceptEPSS 19 %nortel · cvx 1800 multi-service access switch3 июл. 2002 г.
- CVE-2005-419734Наблюдать
tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is exec
ВысокаяCVSS 7,5Proof of conceptEPSS 11 %nortel · ssl vpn13 дек. 2005 г.
- CVE-2007-563632Наблюдать
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibl
ВысокаяCVSS 7,5Proof of conceptEPSS 6 %nortel · ip softphone 205023 окт. 2007 г.
- CVE-2008-499932Наблюдать
Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death
ВысокаяCVSS 7,8Proof of conceptEPSS 3 %nortel · unistim ip phone7 нояб. 2008 г.
- CVE-2007-343832Наблюдать
Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to exe
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %nortel · sip softphone26 июн. 2007 г.
- CVE-2007-559132Наблюдать
The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %nortel · communications server19 окт. 2007 г.
- CVE-2008-657632Наблюдать
Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %nortel · cs10001 апр. 2009 г.
- CVE-2008-587232Наблюдать
Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedi
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %nortel · multimedia communication server 51008 янв. 2009 г.
- CVE-2007-336132Наблюдать
The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device crash) via a SIP mess
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %nortel · pc client soft phone sip22 июн. 2007 г.
- CVE-2003-111531Наблюдать
The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remot
ВысокаяCVSS 7,5Эксплойта нетEPSS 4 %nortel · succession communication server 200031 дек. 2003 г.
- CVE-2004-005631Наблюдать
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP
ВысокаяCVSS 7,5Эксплойта нетEPSS 3 %nortel · business communications manager17 февр. 2004 г.
- CVE-2008-656431Наблюдать
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote att
ВысокаяCVSS 7,6Эксплойта нетEPSS 2 %nortel · communication server 100031 мар. 2009 г.
- CVE-2004-083930Наблюдать
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a
СредняяCVSS 5,0Эксплойта нетEPSS 33 %avaya · ip600 media servers18 авг. 2004 г.
- CVE-2007-233430Наблюдать
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two temp
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %nortel · contivity27 апр. 2007 г.
- CVE-2007-564029Наблюдать
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM
ВысокаяCVSS 7,1Эксплойта нетEPSS 1 %nortel · multimedia communication server 510023 окт. 2007 г.
- CVE-2007-563929Наблюдать
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remot
ВысокаяCVSS 7,1Эксплойта нетEPSS 1 %nortel · ip audio conference phone 203323 окт. 2007 г.
- CVE-2004-131928Наблюдать
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windo
СредняяCVSS 5,0Эксплойта нетEPSS 26 %nortel · ip softphone 205015 дек. 2004 г.