CVE List

Id CVE No. Status Description Phase Votes Comments Actions
5061  CVE-2002-0671  Entry  Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.        View
5062  CVE-2002-0672  Entry  Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null.        View
5063  CVE-2002-0673  Entry  The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions.        View
5064  CVE-2002-0674  Entry  Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication.        View
5065  CVE-2002-0675  Candidate  Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone.  Modified (20050610)  MODIFY(1) Frech | NOOP(5) Armstrong, Cole, Cox, Foat, Wall  Frech> XF:pingtel-xpressa-firmware-upgrade(9570)  View

Page 1013 of 20943, showing 5 records out of 104715 total, starting on record 5061, ending on 5065

<<first 1009 | 1010 | 1011 | 1012 | 1013 | 1014 | 1015 | 1016 | 1017 last>>

Actions