Approved changes feed: RSS · Atom
cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*
part: h version: 1.2.7.4 update: *
| Vendor | Pingtel (45a9ac80-fab4-59c1-b0a6-381af802942a) |
|---|---|
| Product | Xpressa (236d4331-1f62-51f8-a660-edd57321d299) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1680 |
vulnerable | 2026-06-08 04:47:54.772811 |
Details available
application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.
Published: 2005-02-20T05:00:00.000Z
Updated: 2024-08-08T01:00:37.231Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1935 |
vulnerable | 2026-06-08 04:47:18.542342 |
Details available
Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-17T01:15:43.378Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1934 |
vulnerable | 2026-06-08 04:47:18.539797 |
Details available
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-16T22:52:03.725Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0675 |
vulnerable | 2026-06-08 04:46:21.980023 |
Details available
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone.
Published: 2002-07-15T04:00:00.000Z
Updated: 2024-08-08T02:56:38.734Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0674 |
vulnerable | 2026-06-08 04:46:21.979717 |
Details available
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T02:56:38.481Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0673 |
vulnerable | 2026-06-08 04:46:21.979391 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0672 |
vulnerable | 2026-06-08 04:46:21.979056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0670 |
vulnerable | 2026-06-08 04:46:21.975229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0669 |
vulnerable | 2026-06-08 04:46:21.974912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0668 |
vulnerable | 2026-06-08 04:46:21.974585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0667 |
vulnerable | 2026-06-08 04:46:21.974148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.