← Vulnerability feed

Vulnerability record · CVE-2007-5639 · published 23 October 2007

CVE-2007-5639: Nortel ip softphone 2050 vulnerability

Nortel · Ip Softphone 2050

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.

7.1 CVSS 2.0 High EPSS 1.8% · top 22.5%
7.1CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
12References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.

AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://securityreason.com/securityalert/3273
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654715 Patch
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt Exploit
http://www.securityfocus.com/archive/1/482480/100/0/threaded
http://www.securityfocus.com/bid/26122 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/37253
http://securityreason.com/securityalert/3273
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654715 Patch
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt Exploit
http://www.securityfocus.com/archive/1/482480/100/0/threaded
http://www.securityfocus.com/bid/26122 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/37253

Track CVE-2007-5639 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2007-5636Nortel ip softphone 2050 memory buffer overflow vulnerabilityBuffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute…EPSS 6.7%7.1CVE-2007-5640Nortel business communications manager vulnerabilityThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile…EPSS 1.8%5.0CVE-2004-1305Windows ANI cursor parsing flaw allows remote denial of serviceThe Windows Animated Cursor (ANI) handler in Windows NT, 2000 SP4, XP SP1 and Server 2003 mishandles malformed cursor files. Setting the frame number…EPSS 59%analysed5.0CVE-2004-1319Nortel ip softphone 2050 vulnerabilityThe DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, openin…EPSS 27%5.0CVE-2004-0839Avaya ip600 media servers vulnerabilityInternet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page …EPSS 34%4.3CVE-2007-5637Nortel business communications manager information exposure vulnerabilityThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and ot…EPSS 3.1%4.3CVE-2007-5638Nortel business communications manager information exposure vulnerabilityThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and ot…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2007-5639), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.