nortel vulnerabilities
Recent CVEs affecting nortel products. 8 tracked.
nortel has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-04-01. Highest priority: CVE-2008-6578 (score 57/100).
- CVE-2008-6579 MEDIUM 5.0 MITIGATE Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknow
- CVE-2008-6578 HIGH 10.0 MITIGATE Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to exec
- CVE-2008-6577 HIGH 10.0 MITIGATE Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain mult
- CVE-2008-6576 HIGH 7.8 MITIGATE Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Se
- CVE-2008-6564 HIGH 7.6 MITIGATE MITIGATE Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence nu
- CVE-2008-5872 HIGH 7.8 DOWNGRADE Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Mana
- CVE-2008-5871 MEDIUM 6.4 DOWNGRADE Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, wh
- CVE-2008-4999 HIGH 7.8 MITIGATE Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a lo
FAQ
How do I fix nortel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nortel being exploited right now?
None of the tracked nortel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nortel CVE should I patch first?
CVE-2008-6578 currently ranks highest (57/100): Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to exec.