Vulnerability Database

308,681

Total vulnerabilities in the database

CVE-2002-0672

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null.

  • Published: Jul 23, 2002
  • Updated: Nov 9, 2025
  • CVE: CVE-2002-0672
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
pingtel / xpressa 1.2.7.4 1.2.7.4.x
pingtel / xpressa 1.2.5 1.2.5.x