CVE-2002-0674

Published: Jul 23, 2002Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication.

Affected (2)

Products: Pingtel: Xpressa

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Pingtel Xpressa	Version 1.2.5
Pingtel Xpressa	Version 1.2.7.4

References (8)

http://www.atstake.com/research/advisories/2002/a071202-1.txt

Source: cve@mitre.org

http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp

Source: cve@mitre.org

http://www.securityfocus.com/bid/5221

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/9569

Source: cve@mitre.org

http://www.atstake.com/research/advisories/2002/a071202-1.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5221

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/9569

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.