CVE-2007-2334: High severity Nortel Contivity vulnerability
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 505.149, 505.3xx before 505.304, and 6.x before 605.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2334?
CVE-2007-2334 is considered to have a high severity due to its potential for remote code execution.
How do I fix CVE-2007-2334?
To fix CVE-2007-2334, update the Nortel VPN Router to a version equal to or greater than 5_05.304 or 6_05.140.
What types of devices are affected by CVE-2007-2334?
CVE-2007-2334 affects Nortel VPN Router models 1000, 2000, 4000, and 5000 running vulnerable firmware versions.
Can CVE-2007-2334 allow unauthorized access to the device?
Yes, CVE-2007-2334 allows remote attackers to access the administration interface and modify device configurations.
Is there a workaround for CVE-2007-2334 if I cannot update?
While the best solution is to update, consider restricting access to the administration interface via firewall rules as a temporary workaround.