CVE-2002-0675

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...

CVE-2002-0675

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...

CVE-2002-0675

The CVE affects Pingtel xpressa SIP phones (model PX-1) with software versions 1.2.5–1.2.7.4. The root cause is that firmware upgrades can be performed without administrative privileges, enabling an unauthorized user to upgrade the phone. The accompanying @stake advisory details multiple vulnerab...