← Database

CVE-2002-0671

CRITICAL CVSS: 9.8 Published: 2002-07-23 Modified: 2026-06-16

Description

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.

Affected Platforms

Pingtel XpressaPingtel Xpressa Firmware

Weakness Type

CWE-494

References