Nortel vulnerabilitiesNone on the known-exploited list.
Nortel has 44 published vulnerabilities across 104 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Contivity, with 9. If you run Nortel software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Nortel products have the most vulnerabilities?
Contivity leads with 9 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Nortel vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Nortel's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Nortel flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 83%CVE-2005-0356Medium
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with...
- 59%CVE-2004-1305Medium
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero,...
- 34%CVE-2004-0839Medium
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup...
- 27%CVE-2004-1319Medium
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then...
- 20%CVE-2002-0540High
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration.
- 12%CVE-2005-4197High
tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is executed with extra privileges in a cryptographically signed Java Applet.
- 10%CVE-2004-2549Medium
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1)...
- 6.7%CVE-2007-5636High
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of invalid characters to the RTCP port...
- 5.3%CVE-2000-0221Medium
The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
- 4.7%CVE-2003-1115High
The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code...
All Nortel products we track.
25 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Contivitycontivity9 vulnerabilities16 versions
- Business Communications Managerbusiness_communications_manager5 vulnerabilities8 versions
- Communications Servercommunications_server5 vulnerabilities4 versions
- Multimedia Communication Server 5100multimedia_communication_server_51005 vulnerabilities1 version
- Cs1000cs10004 vulnerabilities1 version
- Meridian Sl100meridian_sl1003 vulnerabilities1 version
- Callpilotcallpilot2 vulnerabilities4 versions
- Alteon 2424 Application Switchalteon_2424_application_switch1 vulnerability1 version
- Alteon Acedirectoralteon_acedirector1 vulnerability1 version
- Callpilot Servercallpilot_server1 vulnerability1 version
- Cvx 1800 Multi-Service Access Switchcvx_1800_multi-service_access_switch1 vulnerability1 version
- Media Communication Server 5100media_communication_server_51001 vulnerability1 version
- Media Communication Server 5200media_communication_server_52001 vulnerability1 version
- Net Direct Clientnet_direct_client1 vulnerability1 version
- Optivity Net Architectoptivity_net_architect1 vulnerability1 version
- Pc Client Soft Phone SIPpc_client_soft_phone_sip1 vulnerability1 version
- SIP Multimedia Pc Clientsip_multimedia_pc_client1 vulnerability1 version
- SIP Softphonesip_softphone1 vulnerability1 version
- SSL VPNssl_vpn1 vulnerability2 versions
- Survivable Remote Gatewaysurvivable_remote_gateway1 vulnerability1 version
- Unistim IP Phoneunistim_ip_phone1 vulnerability1 version
- Universal Signaling Pointuniversal_signaling_point1 vulnerability2 versions
- VOIP-Core-Csvoip-core-cs1 vulnerability3 versions
- Helmsmanhelmsman0 vulnerabilities2 versions
This directory lists the 25 Nortel products with at least one tracked version, of 104 in our catalogue.
Running Nortel? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
- Matched to
- Nortel on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 44 published vulnerabilities across 104 products and 58 versions from Nortel.
None of Nortel's vulnerabilities is on the list of flaws known to be exploited today.
Contivity, with 9 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Nortel products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.