GCVE - cpe:2.3:h:pingtel:xpressa:1.2.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:pingtel:xpressa:1.2.8:*:*:*:*:*:*:*

part: h version: 1.2.8 update: *

Vendor	Pingtel (`45a9ac80-fab4-59c1-b0a6-381af802942a`)
Product	Xpressa (`236d4331-1f62-51f8-a660-edd57321d299`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2004-1680`	vulnerable	2026-06-08 04:47:54.773475	Details available application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow. Published: 2005-02-20T05:00:00.000Z Updated: 2024-08-08T01:00:37.231Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/11161 http://secunia.com/advisories/12523 http://www.atstake.com/research/advisories/2004/a091304-2.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/17346	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1935`	vulnerable	2026-06-08 04:47:18.542361	Details available Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar. Published: 2005-06-28T04:00:00.000Z Updated: 2024-09-17T01:15:43.378Z Open on db.gcve.eu Reference links http://online.securityfocus.com/archive/1/288383 http://www.iss.net/security_center/static/9949.php http://www.sys-security.com/archive/advisories/More_Vulnerabilities_with_Pingtel_xpressa_SIP-based_IP_phones.txt http://www.securityfocus.com/bid/5537	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1934`	vulnerable	2026-06-08 04:47:18.540427	Details available Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information. Published: 2005-06-28T04:00:00.000Z Updated: 2024-09-16T22:52:03.725Z Open on db.gcve.eu Reference links http://online.securityfocus.com/archive/1/288383 http://www.securityfocus.com/bid/5534 http://www.sys-security.com/archive/advisories/More_Vulnerabilities_with_Pingtel_xpressa_SIP-based_IP_phones.txt http://www.iss.net/security_center/static/9948.php	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.