Unscored severity · published Jan 8, 2009
CVE-2008-5871
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls,…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Multimedia Communication Server 5100 · Nortel
3.0.13 · source: NVD
Affected product
MC
Multimedia Communication Server 5100
Nortel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5871
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5871
Vendor Advisory
http://secunia.com/advisories/32203
support.nortel.com
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223
voipshield.com
http://voipshield.com/research-details.php?id=119
www.securityfocus.com
http://www.securityfocus.com/bid/31640
www.vupen.com
http://www.vupen.com/english/advisories/2008/2779
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45752
More from Multimedia Communication Server 5100
–
CVE-2008-5872
Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100…