Nortel VPN Router 1010 vulnerabilities

2 CVEs affecting Nortel VPN Router 1010, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2332, published 2007-04-27.

More from Nortel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-2332, published 2007-04-27. High severity, CVSS 9.0. EPSS: 1.7% chance of exploitation in the next 30 days. Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force…
• CVE-2005-1802, published 2005-05-27. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAKMP header.