CVE-2002-1935

Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP)…

published June 28, 2005

CVSS
—
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01351 · 71.1th percentile
Published
2005-06-28T04:00Z
EPSS history
Timeline
  • 28 JUN 04:00Z
    Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP)…
    cvelistv5