https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-1680.htmlhttps://patchthecve.com/cve/CVE-2004-1680.htmlTue, 16 Jun 2026 22:08:11 +0000MEDIUM 5.0: application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.https://patchthecve.com/cve/CVE-2002-0669.htmlhttps://patchthecve.com/cve/CVE-2002-0669.htmlTue, 16 Jun 2026 21:57:54 +0000MEDIUM 5.0: The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows administrators to cause a denial of service by modifying the SIP_AUTHENTICATE_SCHEME value to force authentication of incoming calls, which does not notify the user when an authentication failure occurs.https://patchthecve.com/cve/CVE-2002-1935.htmlhttps://patchthecve.com/cve/CVE-2002-1935.htmlTue, 16 Jun 2026 22:00:20 +0000MEDIUM 5.0: Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar.https://patchthecve.com/cve/CVE-2002-1934.htmlhttps://patchthecve.com/cve/CVE-2002-1934.htmlTue, 16 Jun 2026 22:00:19 +0000MEDIUM 5.0: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information.https://patchthecve.com/cve/CVE-2002-0675.htmlhttps://patchthecve.com/cve/CVE-2002-0675.htmlTue, 16 Jun 2026 21:57:55 +0000MEDIUM 4.6: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone.https://patchthecve.com/cve/CVE-2002-0674.htmlhttps://patchthecve.com/cve/CVE-2002-0674.htmlTue, 16 Jun 2026 21:57:55 +0000HIGH 7.2: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication.https://patchthecve.com/cve/CVE-2002-0673.htmlhttps://patchthecve.com/cve/CVE-2002-0673.htmlTue, 16 Jun 2026 21:57:55 +0000MEDIUM 4.6: The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions.https://patchthecve.com/cve/CVE-2002-0672.htmlhttps://patchthecve.com/cve/CVE-2002-0672.htmlTue, 16 Jun 2026 21:57:54 +0000MEDIUM 4.6: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null.https://patchthecve.com/cve/CVE-2002-0670.htmlhttps://patchthecve.com/cve/CVE-2002-0670.htmlTue, 16 Jun 2026 21:57:54 +0000HIGH 7.5: The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing.https://patchthecve.com/cve/CVE-2002-0668.htmlhttps://patchthecve.com/cve/CVE-2002-0668.htmlTue, 16 Jun 2026 21:57:54 +0000HIGH 7.5: The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to modify the Call Forwarding settings and hijack calls.https://patchthecve.com/cve/CVE-2002-0667.htmlhttps://patchthecve.com/cve/CVE-2002-0667.htmlTue, 16 Jun 2026 21:57:54 +0000HIGH 10.0: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone.