Vulnerabilities > Pingtel > Xpressa Firmware

DATE CVE VULNERABILITY TITLE RISK
2002-07-23 CVE-2002-0671 Download of Code Without Integrity Check vulnerability in Pingtel Xpressa Firmware 1.2.5/1.2.7.4
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.
network
low complexity
pingtel CWE-494
critical
 9.8
9.8