PatchTheCVExpressa vulnerabilities and fixes
Recent CVEs affecting xpressa, with upgrade or downgrade steps. 11 tracked.
xpressa has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-09-13. Highest priority: CVE-2002-0667 (score 56/100).
- CVE-2004-1680 MEDIUM 5.0 MITIGATE application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to
- CVE-2002-1935 MEDIUM 5.0 MITIGATE Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL va
- CVE-2002-1934 MEDIUM 5.0 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up,
- CVE-2002-0675 MEDIUM 4.6 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges
- CVE-2002-0674 HIGH 7.2 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administra
- CVE-2002-0673 MEDIUM 4.6 MITIGATE The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attacker
- CVE-2002-0672 MEDIUM 4.6 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to r
- CVE-2002-0670 HIGH 7.5 MITIGATE The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded
- CVE-2002-0669 MEDIUM 5.0 MITIGATE The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows administrator
- CVE-2002-0668 HIGH 7.5 MITIGATE The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated
- CVE-2002-0667 HIGH 10.0 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password,
FAQ
How do I fix xpressa vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xpressa being exploited right now?
None of the tracked xpressa CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xpressa CVE should I patch first?
CVE-2002-0667 currently ranks highest (56/100): Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password,.