CVE-2007-1820: Nortel Callpilot

High severity, CVSS 9.3. EPSS: 2% chance of exploitation in the next 30 days.

Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove messages, or reconfigure the mailbox, by spoofing Calling Number Identification (CNID, aka Caller ID).

Affected products

• Nortel Callpilot: any version
• Nortel Meridian Mail: any version

Published 2007-04-02. Last modified 2026-06-16.