CVE-2002-0671 Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attacker...
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pingtel xpressa firmware | = 1.2.5 | No fix listed |
| pingtel xpressa firmware | = 1.2.7.4 | No fix listed |
References
- A071202-1 broken-link vendor-advisory
- pingtel-xpressa-dns-spoofing(9566) broken-link vdb-entry
- www.pingtel.com broken-link vendor-advisory
- 5224 broken-link third-party-advisory vdb-entry