CVE-2008-6577

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-04-01 · updated 2026-06-16
Weakness: CWE-255

Description

Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows remote attackers to gain privileges.

Affected products

Nortel Cs1000: 4.50

References

http://osvdb.org/44374
http://secunia.com/advisories/29747
http://securitytracker.com/id?1019848
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
http://www.securityfocus.com/bid/28691
http://www.voipshield.com/research-details.php?id=14
https://exchange.xforce.ibmcloud.com/vulnerabilities/41802
http://osvdb.org/44374
http://secunia.com/advisories/29747
http://securitytracker.com/id?1019848
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
http://www.securityfocus.com/bid/28691

Get alerted when CVE-2008-6577 or the next vulnerability affects your stack