CVE-2007-5638: The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Bus...

Security readout for executives and security teams

This CVE concerns older Nortel IP telephony products that may let a remote attacker spoof certain UNIStim/RUDP messages. The cited description says this could support eavesdropping by abusing audio stream control messages. No CVSS score, KEV listing, or confirmed active exploitation is provided in the source bundle. Exposure is most likely where legacy Nortel UNIStim IP phones, Softphone 2050, IP Phone 1140E, BCM, or related Nortel voice products remain deployed and reachable from untrusted networks. The source bundle does not provide exact affected firmware versions or complete product coverage. Treat this as an exposure-discovery priority for legacy voice environments. If these Nortel systems handle sensitive conversations or are reachable beyond a tightly controlled voice network, prioritize segmentation review and vendor remediation checks despite the missing CVSS score. Mitigation focus: Inventory Nortel UNIStim IP Softphone 2050, IP Phone 1140E, BCM, and related IP Phone assets.; Restrict UNIStim/RUDP access to trusted voice and call-control networks only.; Segment voice devices from user, guest, and internet-reachable networks..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.