CVE-2007-5639: Nortel IP Softphone 2050

High severity, CVSS 7.1. EPSS: 1.8% chance of exploitation in the next 30 days.

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.

Affected products

  • Nortel IP Softphone 2050: any version
  • Nortel Mobile Voice Client 2050: any version

Published 2007-10-23. Last modified 2026-06-16.