Vulnerability in Pingtel Xpressa

CVE-2002-0675

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone.

EPSS: 0.004 (27.0th percentile) — read the EPSS interpretation.

Affected products

Pingtel Xpressa — versions 1.2.5, 1.2.7.4
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_ATSTAKE, vendor-advisory)