CVE-2007-1820: Critical severity Nortel CallPilot vulnerability
Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove messages, or reconfigure the mailbox, by spoofing Calling Number Identification (CNID, aka Caller ID).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1820?
CVE-2007-1820 is considered a high severity vulnerability due to its potential for unauthorized access and manipulation of voicemail systems.
How do I fix CVE-2007-1820?
To mitigate CVE-2007-1820, disable the auto logon feature for mailboxes in Nortel CallPilot and Meridian Mail systems.
What systems are affected by CVE-2007-1820?
CVE-2007-1820 affects Nortel Networks CallPilot and Meridian Mail voicemail systems with auto logon enabled.
Can CVE-2007-1820 allow attackers to manipulate voicemail messages?
Yes, CVE-2007-1820 allows attackers to retrieve, remove messages, or reconfigure the mailbox if they successfully spoof the Caller ID.
What kind of attacks does CVE-2007-1820 enable?
CVE-2007-1820 enables remote attackers to spoof Caller ID and gain unauthorized control over voicemail accounts.