VULNERABILITY INTELLIGENCE

CVE-2002-0671

CVSS score9.8 CRITICAL
EPSS probability1.15%
CISA KEVNot currently listed
Published2002-07-23
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.

Weakness classification

  • CWE-494: Download of Code Without Integrity Check

Primary references