← Vulnerability feed

Vulnerability record · CVE-2007-5640 · published 23 October 2007

CVE-2007-5640: Nortel business communications manager vulnerability

Nortel · Business Communications Manager

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.

7.1 CVSS 2.0 High EPSS 1.8% · top 22.1%
7.1CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
9Affected product versions listed by NVD
16References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.

AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

9 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/41772
http://secunia.com/advisories/27234 Vendor Advisory
http://securityreason.com/securityalert/3274
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654641 Patch
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt Exploit
http://www.securityfocus.com/archive/1/482481/100/0/threaded
http://www.securityfocus.com/bid/26124
https://exchange.xforce.ibmcloud.com/vulnerabilities/37254
http://osvdb.org/41772
http://secunia.com/advisories/27234 Vendor Advisory
http://securityreason.com/securityalert/3274
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654641 Patch
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt Exploit
http://www.securityfocus.com/archive/1/482481/100/0/threaded
http://www.securityfocus.com/bid/26124
https://exchange.xforce.ibmcloud.com/vulnerabilities/37254

Track CVE-2007-5640 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2007-5591Nortel meridian option 11c vulnerabilityThe CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11…EPSS 2.3%7.5CVE-2004-0056Nortel business communications manager vulnerabilityMultiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and…EPSS 3.8%5.0CVE-2005-0356TCP PAWS timestamp handling allows remote connection lossMultiple TCP implementations that enable the timestamps option with Protection Against Wrapped Sequence Numbers (PAWS) can be forced to discard valid…EPSS 83%analysed4.3CVE-2007-5637Nortel business communications manager information exposure vulnerabilityThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and ot…EPSS 3.1%4.3CVE-2007-5638Nortel business communications manager information exposure vulnerabilityThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and ot…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2007-5640), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.