Nortel Multimedia Communication Server 5100 vulnerabilities

2 CVEs affecting Nortel Multimedia Communication Server 5100, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-5872, published 2009-01-08.

More from Nortel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-5872, published 2009-01-08. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100 3.0.13 allow remote…
• CVE-2008-5871, published 2009-01-08. Medium severity, CVSS 6.4. EPSS: 1.6% chance of exploitation in the next 30 days. Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the…