Unscored severity · published Mar 31, 2009
CVE-2008-6564
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Communication Server 1000 · Nortel
All versions, or not specified · source: NVD
UP
Unistim Protocol · Nortel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6564
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6564
osvdb.org
http://osvdb.org/44379
secunia.com
http://secunia.com/advisories/29747
Vendor Advisory
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
www.securityfocus.com
http://www.securityfocus.com/bid/28691
www.securitytracker.com
http://www.securitytracker.com/id?1019847
www.voipshield.com
http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC