What’s Vulnerable › Vulnerabilities

CVE-2005-1802

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-05-27 · updated 2026-06-16

Description

Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAKMP header.

Affected products

• Nortel Contivity: 1000_vpn_switch, 1500_vpn_switch, 1600_secure_ip_services_gateway, 2000_vpn_switch, 2500_vpn_switch, 2600_secure_ip_services_gateway (+3)
• Nortel Vpn Router 1010: all versions
• Nortel Vpn Router 1050: all versions
• Nortel Vpn Router 1100: all versions
• Nortel Vpn Router 1700: all versions
• Nortel Vpn Router 1740: all versions
• Nortel Vpn Router 2700: all versions
• Nortel Vpn Router 5000: all versions
• Nortel Vpn Router 600: all versions

References

• http://securitytracker.com/id?1014068
• http://www.nta-monitor.com/news/vpn-flaws/nortel/vpn-router-dos/
• http://www.securityfocus.com/archive/1/399423
• http://www.securityfocus.com/bid/13792
• http://securitytracker.com/id?1014068
• http://www.nta-monitor.com/news/vpn-flaws/nortel/vpn-router-dos/
• http://www.securityfocus.com/archive/1/399423
• http://www.securityfocus.com/bid/13792

Get alerted when CVE-2005-1802 or the next vulnerability affects your stack