CVE-2008-4999: Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a...

Security readout for executives and security teams

This is a reported denial-of-service issue in a Nortel UNIStim IP Phone firmware build, where a malformed or oversized network ping was said to crash the phone. The public record is unusually uncertain: reproduction was unreliable, a third party could not reproduce it on a nearby build, and severity is not scored. Exposure is most plausible where legacy Nortel UNIStim IP Phone 0604DAS devices still exist and are reachable over networks that allow unsolicited ICMP traffic. The provided data does not identify broader affected models, supported versions, or internet exposure patterns. Treat this as a legacy exposure review rather than an emergency vulnerability response. Business urgency depends on whether affected Nortel phones still exist and whether voice networks are poorly segmented. The evidence does not justify claims of active exploitation or critical impact. Mitigation focus: Check Nortel or successor vendor guidance for confirmed fixes or advisories.; Inventory legacy Nortel UNIStim phones and identify any 0604DAS firmware.; Limit unnecessary network reachability to voice endpoints, especially from untrusted networks..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.