PT-2002-1701 · Pingtel · Pingtel Xpressa

Published 2002-07-15 · Updated 2008-09-10 · CVE-2002-0675

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pingtel xpressa SIP-based voice-over-IP phone versions 1.2.5 through 1.2.7.4

Description The issue allows unauthorized users to upgrade the phone's firmware without requiring administrative privileges.

Recommendations For versions 1.2.5 through 1.2.7.4, consider restricting access to the firmware upgrade functionality to prevent unauthorized upgrades until a patch is available.

Fix

Related Identifiers

CVE-2002-0675

Affected Products

Pingtel Xpressa

References · 5

• http://atstake.com/research/advisories/2002/a071202-1.txt · Vendor Advisory
• http://pingtel.com/PingtelAtStakeAdvisoryResponse.jsp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0675 · Security Note
• http://securityfocus.com/bid/5223 · Note
• http://iss.net/security_center/static/9570.php · Note