PT-2002-1695 · Pingtel · Pingtel Xpressa

Published 2002-07-23 · Updated 2017-10-10 · CVE-2002-0668

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pingtel xpressa SIP-based voice-over-IP phone versions 1.2.5 through 1.2.7.4

Description The issue allows authenticated users to modify the Call Forwarding settings, potentially leading to call hijacking.

Recommendations For versions 1.2.5 through 1.2.7.4, consider restricting access to the Call Forwarding settings in the web interface to prevent unauthorized modifications.

Fix

Related Identifiers

CVE-2002-0668

Affected Products

Pingtel Xpressa

References · 5

• http://atstake.com/research/advisories/2002/a071202-1.txt · Vendor Advisory
• http://pingtel.com/PingtelAtStakeAdvisoryResponse.jsp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0668 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9563 · Note
• http://osvdb.org/5144 · Note