PatchTheCVEpingtel vulnerabilities
Recent CVEs affecting pingtel products. 12 tracked.
pingtel has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-09-13. Highest priority: CVE-2002-0671 (score 56/100).
- CVE-2004-1680 MEDIUM 5.0 MITIGATE application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to
- CVE-2002-1935 MEDIUM 5.0 MITIGATE Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL va
- CVE-2002-1934 MEDIUM 5.0 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up,
- CVE-2002-0675 MEDIUM 4.6 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges
- CVE-2002-0674 HIGH 7.2 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administra
- CVE-2002-0673 MEDIUM 4.6 MITIGATE The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attacker
- CVE-2002-0672 MEDIUM 4.6 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to r
- CVE-2002-0671 CRITICAL 9.8 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web si
- CVE-2002-0670 HIGH 7.5 MITIGATE The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded
- CVE-2002-0669 MEDIUM 5.0 MITIGATE The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows administrator
- CVE-2002-0668 HIGH 7.5 MITIGATE The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated
- CVE-2002-0667 HIGH 10.0 MITIGATE Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password,
FAQ
How do I fix pingtel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pingtel being exploited right now?
None of the tracked pingtel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pingtel CVE should I patch first?
CVE-2002-0671 currently ranks highest (56/100): Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web si.