← Database

CVE-2007-2332

CRITICAL CVSS: 9.0 Published: 2007-04-27 Modified: 2026-06-16

Description

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store.

Affected Platforms

Nortel Vpn Router 1050Nortel Vpn Router 1700Nortel Vpn Router 2700Nortel Vpn Router 1100Nortel Vpn Router 1740Nortel Vpn Router 5000Nortel Vpn Router 1010Nortel Vpn Router 1750

Weakness Type

NVD-CWE-Other

References