CVE-2002-0671

Critical

Published: 23/07/2002(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

Pingtel xpressa SIP-based VoIP phones versions 1.2.5 to 1.2.7.4 download phone applications from a website but cannot verify their integrity. This could allow remote attackers to install malicious applications via DNS spoofing.

Risk Assessment

The organization may be exposed to the installation of malicious software, leading to potential security breaches and data loss.

Recommendation

It is recommended to update the phone software to the latest version and implement integrity verification mechanisms for downloaded applications.

Original NVD description (English source)

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.