CVE Tools
Track your stack

Nortel

36 CVEs tracked since 2000. Since Apr 2000, none of them reached CISA KEV.

Nortel CVEs per month

Apr 2000 to Apr 2009. Point at a month, or focus the strip and use the arrow keys.
Nortel CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2000-0410
2000-05null or fewer
2000-06null or fewer
2000-07null or fewer
2000-08null or fewer
2000-09null or fewer
2000-1030
2000-11null or fewer
2000-12null or fewer
2001-01null or fewer
2001-02null or fewer
2001-03null or fewer
2001-04null or fewer
2001-05null or fewer
2001-06null or fewer
2001-07null or fewer
2001-08null or fewer
2001-09null or fewer
2001-10null or fewer
2001-11null or fewer
2001-12null or fewer
2002-01null or fewer
2002-02null or fewer
2002-03null or fewer
2002-04null or fewer
2002-05null or fewer
2002-0620
2002-07null or fewer
2002-08null or fewer
2002-09null or fewer
2002-10null or fewer
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-02null or fewer
2003-03null or fewer
2003-04null or fewer
2003-05null or fewer
2003-06null or fewer
2003-07null or fewer
2003-08null or fewer
2003-09null or fewer
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-0110
2004-02null or fewer
2004-03null or fewer
2004-04null or fewer
2004-05null or fewer
2004-06null or fewer
2004-07null or fewer
2004-08null or fewer
2004-0910
2004-10null or fewer
2004-11null or fewer
2004-1210
2005-0120
2005-02null or fewer
2005-0320
2005-04null or fewer
2005-05null or fewer
2005-06null or fewer
2005-07null or fewer
2005-08null or fewer
2005-09null or fewer
2005-10null or fewer
2005-11null or fewer
2005-1220
2006-01null or fewer
2006-02null or fewer
2006-03null or fewer
2006-04null or fewer
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-08null or fewer
2006-09null or fewer
2006-10null or fewer
2006-11null or fewer
2006-12null or fewer
2007-01null or fewer
2007-02null or fewer
2007-03null or fewer
2007-0440
2007-05null or fewer
2007-0620
2007-07null or fewer
2007-08null or fewer
2007-09null or fewer
2007-1060
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-0510
2008-06null or fewer
2008-0710
2008-08null or fewer
2008-09null or fewer
2008-10null or fewer
2008-1110
2008-12null or fewer
2009-0120
2009-02null or fewer
2009-03null or fewer
2009-0440

Products

The products that kept showing up in Nortel's monthly top three, with their CVEs summed over those months.

  1. Contivity75 months
  2. CS100041 month
  3. Meridian Option 11c41 month
  4. Meridian Option 51c41 month
  5. Meridian Option 61c41 month
  6. VPN Router 500031 month
  7. Ip Softphone 205021 month
  8. Multimedia Communication Server 510021 month
  9. 802.11 Wireless Ip Gateway11 month
  10. Alteon Acedirector11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Nortel.

  1. CVE-2008-6576Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attacke...7.8
  2. CVE-2008-6579Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators."5.0
  3. CVE-2008-6578Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive information, or cause a den...10.0
  4. CVE-2008-6577Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows remote attackers to ga...10.0
  5. CVE-2008-6564Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force att...7.6
  6. CVE-2008-5871Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the s...6.4
  7. CVE-2008-5872Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100 3.0.13 allow remote att...7.8
  8. CVE-2008-4999Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: this issue could not be reproduced by a third ...7.8
  9. CVE-2008-3157Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service (resource consumption) via a large numb...5.0
  10. CVE-2008-2218Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS) before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service (cra...5.0
  11. CVE-2007-5636Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of invalid character...7.5
  12. CVE-2007-5639The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) vi...7.1
  13. CVE-2007-5640The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow re...7.1
  14. CVE-2007-5638The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different valu...4.3
  15. CVE-2007-5637The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eave...4.3

The record

Peak rank
#20 in Oct 2007
Busiest month shown
Oct 2007, 6 CVEs
Months with a KEV entry
0 since Apr 2000
Monthly snapshots
17 since 2000
Nortel's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store