CVE-2007-5591
CVE-2007-5591 is a high-severity vulnerability in Nortel Meridian Option 11c with a CVSS 2.0 base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 2.0 base score 7.8)
- EPSS exploit prediction: 2% (81st percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Nortel Meridian Option 11c
- Published:
- Last modified:
Description
The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service (telephony application outage) via a flood of packets to Embedded LAN (ELAN) ports.
Frequently asked questions
- What is CVE-2007-5591?
- The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service (telephony application outage) via a flood of packets to Embedded LAN (ELAN) ports.
- How severe is CVE-2007-5591?
- CVE-2007-5591 has a CVSS 2.0 base score of 7.8, rated high severity.
- Is CVE-2007-5591 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (81st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-5591?
- CVE-2007-5591 primarily affects Nortel Meridian Option 11c. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2007-5591?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2007-5591 published?
- CVE-2007-5591 was published on 2007-10-19 and last updated on 2026-06-16.
References
- http://osvdb.org/41799
- http://secunia.com/advisories/27282
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655204
- http://www.csnc.ch/static/advisory/csnc/nortel_telephony_server_denial_of_service_v1.0.txt
- http://www.securityfocus.com/archive/1/482484/100/0/threaded
- http://www.securityfocus.com/bid/26113
- http://www.vupen.com/english/advisories/2007/3536
- http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/42/022871-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37252
Affected products (7)
- cpe:2.3:a:nortel:meridian_option_11c:*:*:*:*:*:*:*:*
- cpe:2.3:a:nortel:meridian_option_51c:*:*:*:*:*:*:*:*
- cpe:2.3:a:nortel:meridian_option_61c:*:*:*:*:*:*:*:*
- cpe:2.3:a:nortel:meridian_option_81c:*:*:*:*:*:*:*:*
- cpe:2.3:a:nortel:voip-core-cs:1000e:*:enterprise:*:*:*:*:*
- cpe:2.3:a:nortel:voip-core-cs:1000m:*:enterprise:*:*:*:*:*
- cpe:2.3:a:nortel:voip-core-cs:1000s:*:enterprise:*:*:*:*:*
More vulnerabilities in Nortel Meridian Option 11c
- CVE-2007-5640 — High (CVSS 7.1): The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business…
- CVE-2007-5637 — Medium (CVSS 4.3): The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business…
- CVE-2007-5638 — Medium (CVSS 4.3): The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business…