https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6579.htmlhttps://patchthecve.com/cve/CVE-2008-6579.htmlTue, 16 Jun 2026 23:02:30 +0000MEDIUM 5.0: Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators."https://patchthecve.com/cve/CVE-2008-6578.htmlhttps://patchthecve.com/cve/CVE-2008-6578.htmlTue, 16 Jun 2026 23:02:30 +0000HIGH 10.0: Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive information, or cause a denial of service via unknown vectors.https://patchthecve.com/cve/CVE-2008-6577.htmlhttps://patchthecve.com/cve/CVE-2008-6577.htmlTue, 16 Jun 2026 23:02:30 +0000HIGH 10.0: Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows remote attackers to gain privileges.https://patchthecve.com/cve/CVE-2008-6576.htmlhttps://patchthecve.com/cve/CVE-2008-6576.htmlTue, 16 Jun 2026 23:02:30 +0000HIGH 7.8: Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service (resource exhaustion and failed updates) via unknown vectors that causehttps://patchthecve.com/cve/CVE-2008-6564.htmlhttps://patchthecve.com/cve/CVE-2008-6564.htmlTue, 16 Jun 2026 23:02:27 +0000HIGH 7.6: Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks.https://patchthecve.com/cve/CVE-2008-5872.htmlhttps://patchthecve.com/cve/CVE-2008-5872.htmlTue, 16 Jun 2026 23:01:08 +0000HIGH 7.8: Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100 3.0.13 allow remote attackers to cause a denial of service (device outage) via a UFTP message that has a negative block size ohttps://patchthecve.com/cve/CVE-2008-5871.htmlhttps://patchthecve.com/cve/CVE-2008-5871.htmlTue, 16 Jun 2026 23:01:08 +0000MEDIUM 6.4: Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.https://patchthecve.com/cve/CVE-2008-4999.htmlhttps://patchthecve.com/cve/CVE-2008-4999.htmlTue, 16 Jun 2026 22:58:55 +0000HIGH 7.8: Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduc