7.2
CVSSv2

CVE-2002-0674

Published: 23/07/2002 Updated: 10/10/2017
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 up to and including 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication.

Vulnerable Product Search on Vulmon Subscribe to Product

pingtel xpressa 1.2.5

pingtel xpressa 1.2.7.4