CVE-2002-0671 — CRITICAL (9.8)

Vulnerability Description

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Pingtel	Xpressa Firmware	1.2.5
Pingtel	Xpressa	-

Related Weaknesses (CWE)

CWE-494

References

http://www.atstake.com/research/advisories/2002/a071202-1.txtBroken Link
http://www.iss.net/security_center/static/9566.phpBroken Link
http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jspBroken LinkVendor Advisory
http://www.securityfocus.com/bid/5224Broken LinkThird Party AdvisoryVDB Entry
http://www.atstake.com/research/advisories/2002/a071202-1.txtBroken Link
http://www.iss.net/security_center/static/9566.phpBroken Link
http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jspBroken LinkVendor Advisory
http://www.securityfocus.com/bid/5224Broken LinkThird Party AdvisoryVDB Entry

FAQ

What is CVE-2002-0671?

CVE-2002-0671 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attacker...

How severe is CVE-2002-0671?

CVE-2002-0671 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2002-0671?

Check the references section above for vendor advisories and patch information. Affected products include: Pingtel Xpressa Firmware, Pingtel Xpressa.