Lucene search
HistoryFeb 20, 2005 - 5:00 a.m.
CVE-2004-1680
pingtel xpressa
firmware 2.1.11.24
application.cgi
denial of service
vxworks os
buffer overflow
cve-2004-1680
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.8%
application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.
Affected configurations
Node
pingtelxpressaMatch1.2.5
ORpingtelxpressaMatch1.2.7.4
ORpingtelxpressaMatch1.2.8
ORpingtelxpressaMatch2.0
ORpingtelxpressaMatch2.0.1
ORpingtelxpressaMatch2.1.11.24
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.8%
Related for CVE-2004-1680