The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote malicious users to guess the RUDP ID and spoof messages. NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
nortel business_communications_manager srg200 |
||
nortel business_communications_manager srg50 |
||
nortel mobile_voice_client_2050 |
||
nortel business_communications_manager 400 |
||
nortel business_communications_manager 50 |
||
nortel meridian_option_11c |
||
nortel meridian_option_51c |
||
nortel business_communications_manager 50a |
||
nortel business_communications_manager 50e |
||
nortel meridian_option_61c |
||
nortel meridian_option_81c |
||
nortel meridian_sl100 cs2100 |
||
nortel business_communications_manager 1000 |
||
nortel business_communications_manager 200 |
||
nortel centrex_ip_client_manager |
||
nortel centrex_ip_element_manager |
Vulmon