Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed…
Priority MEDIUM 42Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store.
Why it matters now
EPSS 0.01734 77th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:nortel:vpn_router_1010:*:*:*:*:*:*:*:* | all versions | Vulnerable | Nortel |
| cpe:2.3:h:nortel:vpn_router_1050:*:*:*:*:*:*:*:* | all versions | Vulnerable | Nortel |
| cpe:2.3:h:nortel:vpn_router_1100:*:*:*:*:*:*:*:* | all versions | Vulnerable | Nortel |
| cpe:2.3:h:nortel:vpn_router_1700:*:*:*:*:*:*:*:* | all versions | Vulnerable | Nortel |
| cpe:2.3:h:nortel:vpn_router_1740:*:*:*:*:*:*:*:* | all versions | Vulnerable | Nortel |
| cpe:2.3:h:nortel:vpn_router_1750:*:*:*:*:*:*:*:* | all versions | Vulnerable | Nortel |
| cpe:2.3:h:nortel:vpn_router_2700:*:*:*:*:*:*:*:* | all versions | Vulnerable | Nortel |
| cpe:2.3:h:nortel:vpn_router_5000:*:*:*:*:*:*:*:* | all versions | Vulnerable | Nortel |
- cpe:2.3:h:nortel:vpn_router_1010:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
- cpe:2.3:h:nortel:vpn_router_1050:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
- cpe:2.3:h:nortel:vpn_router_1100:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
- cpe:2.3:h:nortel:vpn_router_1700:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
- cpe:2.3:h:nortel:vpn_router_1740:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
- cpe:2.3:h:nortel:vpn_router_1750:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
- cpe:2.3:h:nortel:vpn_router_2700:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
- cpe:2.3:h:nortel:vpn_router_5000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-2332
- 2026-10-03 Alias added: GHSA-4qc5-qj4v-hc88
References
More Nortel Vpn Router 1010 vulnerabilities
- TI-2005-01709 Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2007-2332 · CVE Program
- CVE-2007-2332 · NVD
- FIRST EPSS
- GHSA-4qc5-qj4v-hc88 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences