PT-2002-1695 · Pingtel · Pingtel Xpressa

Publicado 2002-07-23 · Atualizado 2017-10-10 · CVE-2002-0668

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pingtel xpressa SIP-based voice-over-IP phone versions 1.2.5 through 1.2.7.4

Description The issue allows authenticated users to modify the Call Forwarding settings, potentially leading to call hijacking.

Recommendations For versions 1.2.5 through 1.2.7.4, consider restricting access to the Call Forwarding settings in the web interface to prevent unauthorized modifications.

Correção

Identificadores relacionados

CVE-2002-0668

Produtos afetados

Pingtel Xpressa

Referências · 5

• http://atstake.com/research/advisories/2002/a071202-1.txt · Aviso do Fabricante
• http://pingtel.com/PingtelAtStakeAdvisoryResponse.jsp · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9563 · Nota
• http://osvdb.org/5144 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0668 · Nota de Segurança