Vulnerability Database

308,681

Total vulnerabilities in the database

CVE-2002-0670

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing.

  • Published: Jul 23, 2002
  • Updated: Nov 9, 2025
  • CVE: CVE-2002-0670
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
pingtel / xpressa 1.2.7.4 1.2.7.4.x
pingtel / xpressa 1.2.5 1.2.5.x