Critical severity9.8NVD Advisory· Published Jul 23, 2002· Updated Apr 16, 2026
CVE-2002-0671
CVE-2002-0671
Description
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.
Affected products
2cpe:2.3:o:pingtel:xpressa_firmware:1.2.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:pingtel:xpressa_firmware:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:o:pingtel:xpressa_firmware:1.2.7.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.pingtel.com/PingtelAtStakeAdvisoryResponse.jspnvdBroken LinkVendor Advisory
- www.securityfocus.com/bid/5224nvdBroken LinkThird Party AdvisoryVDB Entry
- www.atstake.com/research/advisories/2002/a071202-1.txtnvdBroken Link
- www.iss.net/security_center/static/9566.phpnvdBroken Link
News mentions
0No linked articles in our index yet.