CVE-2007-5637: The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Bus...

Security readout for executives and security teams

This CVE describes Nortel IP voice products that could be remotely placed into a listening mode, allowing eavesdropping on nearby conversations. The bundle names UNIStim IP Softphone 2050, IP Phone 1140E, and broader Nortel IP Phone and BCM product lines, but does not provide precise version ranges or a confirmed fix. Exposure is most likely in organizations still operating legacy Nortel IP phones, UNIStim softphones, BCM systems, or related Nortel voice infrastructure reachable from user, guest, or untrusted networks. Treat as high priority if legacy Nortel voice systems remain deployed, especially in offices handling sensitive conversations. The business issue is confidentiality, not data theft alone: compromised phones could become remote microphones. Mitigation focus: Inventory Nortel UNIStim, IP Phone 1140E, IP Softphone 2050, and BCM deployments.; Check Nortel or successor-vendor advisories for affected versions and supported remediation.; Restrict voice endpoint signaling access to trusted call-control infrastructure only..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.