CVE-2002-1934 in xpressa

Riassunto

di MITRE

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 29/06/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19576
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.01189
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1934
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1934
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1934/