CVE-2004-2549: Nortel Wlan Access Point 2220

Medium severity, CVSS 5.0. EPSS: 10.5% chance of exploitation in the next 30 days.

Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow.

Affected products

• Nortel Wlan Access Point 2220: any version
• Nortel Wlan Access Point 2221: any version
• Nortel Wlan Access Point 2225: any version

Published 2004-12-31. Last modified 2026-06-16.