CVE-2007-2334

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-27 · updated 2026-06-16

Description

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.

Affected products

Nortel Contivity: 1000_vpn_switch, 2000_vpn_switch, 4000_vpn_switch
Nortel Vpn Router 5000: all versions

References

http://osvdb.org/35056
http://secunia.com/advisories/24962
http://www.securityfocus.com/bid/23562
http://www.securitytracker.com/id?1017943
http://www.vupen.com/english/advisories/2007/1464
http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null
http://osvdb.org/35056
http://secunia.com/advisories/24962
http://www.securityfocus.com/bid/23562
http://www.securitytracker.com/id?1017943
http://www.vupen.com/english/advisories/2007/1464
http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null

Get alerted when CVE-2007-2334 or the next vulnerability affects your stack