The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote malicious users to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
nortel business_communications_manager srg50 |
||
nortel centrex_ip_client_manager |
||
nortel mobile_voice_client_2050 |
||
nortel business_communications_manager 400 |
||
nortel business_communications_manager 50 |
||
nortel business_communications_manager 50a |
||
nortel meridian_option_51c |
||
nortel meridian_option_61c |
||
nortel business_communications_manager 50e |
||
nortel business_communications_manager srg200 |
||
nortel meridian_option_81c |
||
nortel meridian_sl100 cs2100 |
||
nortel business_communications_manager 1000 |
||
nortel business_communications_manager 200 |
||
nortel centrex_ip_element_manager |
||
nortel meridian_option_11c |
Vulmon