Lucene search
HistoryJan 08, 2009 - 6:30 p.m.
CVE-2008-5871
nortel
msc 5100
voip
spoofing
security vulnerability
cve-2008-5871
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.4%
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
Affected configurations
Node
nortelmultimedia_communication_server_5100Match3.0.13
| CPE | Name | Operator | Version |
|---|---|---|---|
| nortel:multimedia_communication_server_5100 | nortel multimedia communication server 5100 | eq | 3.0.13 |
Related
cvelist
cvelist
CVE-2008-5871
2009-01-08 18:13:00
nvd
nvd
CVE-2008-5871
2009-01-08 18:30:04
prion
prion
Command injection
2009-01-08 18:30:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.4%
Related for CVE-2008-5871