nortel kayıtları
nortel üreticisine ait 44 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 6
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-20 Improper Input Validation2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-255 Credentials Management Errors2
- CWE-310 Cryptographic Issues1
- CWE-399 Resource Management Errors1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
44 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2005-0356Kavram kanıtı | Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackecisco · agent desktop | Orta5,0 | — | %82,7 | 31 May 2005 |
41Planlayın | CVE-2008-6578İstismar yok | Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gainnortel · cs1000 | Kritik10,0 | — | %3,3 | 1 Nis 2009 |
41Planlayın | CVE-2008-6577İstismar yok | Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded acnortel · cs1000 · CWE-255 | Kritik10,0 | — | %2,6 | 1 Nis 2009 |
41Planlayın | CVE-2007-2333İstismar yok | Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes thenortel · contivity | Kritik10,0 | — | %2,5 | 27 Nis 2007 |
40Planlayın | CVE-2006-6670İstismar yok | Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL.nortel · callpilot server | Kritik10,0 | — | %1,6 | 20 Ara 2006 |
38İzleyin | CVE-2004-1305Kavram kanıtı | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote nortel · ip softphone 2050 | Orta5,0 | — | %58,5 | 23 Ara 2004 |
38İzleyin | CVE-2007-1820İstismar yok | Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or nortel · callpilot | Kritik9,3 | — | %2,0 | 2 Nis 2007 |
37İzleyin | CVE-2007-2332İstismar yok | Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote nortel · vpn router 1010 | Kritik9,0 | — | %1,7 | 27 Nis 2007 |
36İzleyin | CVE-2002-0540Kavram kanıtı | Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modnortel · cvx 1800 multi-service access switch | Yüksek7,5 | — | %19,9 | 3 Tem 2002 |
34İzleyin | CVE-2005-4197Kavram kanıtı | tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is execnortel · ssl vpn | Yüksek7,5 | — | %11,8 | 13 Ara 2005 |
32İzleyin | CVE-2007-5636Kavram kanıtı | Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possiblnortel · ip softphone 2050 · CWE-119 | Yüksek7,5 | — | %6,6 | 23 Eki 2007 |
32İzleyin | CVE-2008-4999Kavram kanıtı | Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of deathnortel · unistim ip phone · CWE-20 | Yüksek7,8 | — | %3,8 | 7 Kas 2008 |
32İzleyin | CVE-2007-3438İstismar yok | Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to exenortel · sip softphone | Yüksek7,8 | — | %2,4 | 26 Haz 2007 |
32İzleyin | CVE-2007-5591İstismar yok | The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-nortel · communications server | Yüksek7,8 | — | %2,2 | 19 Eki 2007 |
32İzleyin | CVE-2008-6576İstismar yok | Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when nortel · cs1000 | Yüksek7,8 | — | %1,9 | 1 Nis 2009 |
32İzleyin | CVE-2008-5872İstismar yok | Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedinortel · multimedia communication server 5100 · CWE-20 | Yüksek7,8 | — | %1,9 | 8 Oca 2009 |
32İzleyin | CVE-2007-3361İstismar yok | The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device crash) via a SIP messnortel · pc client soft phone sip | Yüksek7,8 | — | %1,9 | 22 Haz 2007 |
31İzleyin | CVE-2003-1115İstismar yok | The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remotnortel · succession communication server 2000 | Yüksek7,5 | — | %4,6 | 31 Ara 2003 |
31İzleyin | CVE-2004-0056İstismar yok | Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP nortel · business communications manager | Yüksek7,5 | — | %3,8 | 17 Şub 2004 |
31İzleyin | CVE-2008-6564İstismar yok | Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attnortel · communication server 1000 | Yüksek7,6 | — | %2,2 | 31 Mar 2009 |
30İzleyin | CVE-2004-0839İstismar yok | Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a avaya · ip600 media servers | Orta5,0 | — | %33,9 | 18 Ağu 2004 |
30İzleyin | CVE-2007-2334İstismar yok | Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two tempnortel · contivity | Yüksek7,5 | — | %1,6 | 27 Nis 2007 |
29İzleyin | CVE-2007-5640İstismar yok | The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCMnortel · multimedia communication server 5100 | Yüksek7,1 | — | %1,8 | 23 Eki 2007 |
29İzleyin | CVE-2007-5639İstismar yok | The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remotnortel · ip audio conference phone 2033 | Yüksek7,1 | — | %1,7 | 23 Eki 2007 |
28İzleyin | CVE-2004-1319İstismar yok | The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windonortel · ip softphone 2050 | Orta5,0 | — | %26,9 | 15 Ara 2004 |
- CVE-2005-035645Planlayın
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attacke
OrtaCVSS 5,0Kavram kanıtıEPSS %82cisco · agent desktop31 May 2005
- CVE-2008-657841Planlayın
Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain
KritikCVSS 10,0İstismar yokEPSS %3nortel · cs10001 Nis 2009
- CVE-2008-657741Planlayın
Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded ac
KritikCVSS 10,0İstismar yokEPSS %2nortel · cs10001 Nis 2009
- CVE-2007-233341Planlayın
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the
KritikCVSS 10,0İstismar yokEPSS %2nortel · contivity27 Nis 2007
- CVE-2006-667040Planlayın
Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL.
KritikCVSS 10,0İstismar yokEPSS %1nortel · callpilot server20 Ara 2006
- CVE-2004-130538İzleyin
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote
OrtaCVSS 5,0Kavram kanıtıEPSS %58nortel · ip softphone 205023 Ara 2004
- CVE-2007-182038İzleyin
Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or
KritikCVSS 9,3İstismar yokEPSS %2nortel · callpilot2 Nis 2007
- CVE-2007-233237İzleyin
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote
KritikCVSS 9,0İstismar yokEPSS %1nortel · vpn router 101027 Nis 2007
- CVE-2002-054036İzleyin
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and mod
YüksekCVSS 7,5Kavram kanıtıEPSS %19nortel · cvx 1800 multi-service access switch3 Tem 2002
- CVE-2005-419734İzleyin
tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is exec
YüksekCVSS 7,5Kavram kanıtıEPSS %11nortel · ssl vpn13 Ara 2005
- CVE-2007-563632İzleyin
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibl
YüksekCVSS 7,5Kavram kanıtıEPSS %6nortel · ip softphone 205023 Eki 2007
- CVE-2008-499932İzleyin
Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death
YüksekCVSS 7,8Kavram kanıtıEPSS %3nortel · unistim ip phone7 Kas 2008
- CVE-2007-343832İzleyin
Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to exe
YüksekCVSS 7,8İstismar yokEPSS %2nortel · sip softphone26 Haz 2007
- CVE-2007-559132İzleyin
The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-
YüksekCVSS 7,8İstismar yokEPSS %2nortel · communications server19 Eki 2007
- CVE-2008-657632İzleyin
Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when
YüksekCVSS 7,8İstismar yokEPSS %1nortel · cs10001 Nis 2009
- CVE-2008-587232İzleyin
Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedi
YüksekCVSS 7,8İstismar yokEPSS %1nortel · multimedia communication server 51008 Oca 2009
- CVE-2007-336132İzleyin
The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device crash) via a SIP mess
YüksekCVSS 7,8İstismar yokEPSS %1nortel · pc client soft phone sip22 Haz 2007
- CVE-2003-111531İzleyin
The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remot
YüksekCVSS 7,5İstismar yokEPSS %4nortel · succession communication server 200031 Ara 2003
- CVE-2004-005631İzleyin
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP
YüksekCVSS 7,5İstismar yokEPSS %3nortel · business communications manager17 Şub 2004
- CVE-2008-656431İzleyin
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote att
YüksekCVSS 7,6İstismar yokEPSS %2nortel · communication server 100031 Mar 2009
- CVE-2004-083930İzleyin
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a
OrtaCVSS 5,0İstismar yokEPSS %33avaya · ip600 media servers18 Ağu 2004
- CVE-2007-233430İzleyin
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two temp
YüksekCVSS 7,5İstismar yokEPSS %1nortel · contivity27 Nis 2007
- CVE-2007-564029İzleyin
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM
YüksekCVSS 7,1İstismar yokEPSS %1nortel · multimedia communication server 510023 Eki 2007
- CVE-2007-563929İzleyin
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remot
YüksekCVSS 7,1İstismar yokEPSS %1nortel · ip audio conference phone 203323 Eki 2007
- CVE-2004-131928İzleyin
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windo
OrtaCVSS 5,0İstismar yokEPSS %26nortel · ip softphone 205015 Ara 2004