Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone.
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:CPingtel Xpressa
HWPingtel1.2.51.2.7.4
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
References
Related vulnerabilities
CVE-2002-0671CRITICAL9.8ten sam produkt
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web si...
CVE-2002-0670HIGH7.5ten sam produkt
The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded ...
CVE-2002-0674HIGH7.2ten sam produkt
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administra...
CVE-2002-0668HIGH7.5ten sam produkt
The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated...
CVE-2004-1680MEDIUM5.0ten sam produkt
application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to...