Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pingtel Expressa任意固件升级漏洞
Vulnerability Description
Expressa是一款由pingTel开发和维护的基于JAVA的VOIP电话系统。 Expressa针对升级固件操作缺少正确处理，本地攻击者可以利用这个漏洞随意升级Expressa电话系统固件。 用户在升级固件的时候，Expressa电话系统没有对用户是否为管理员身份进行验证，任意用户可以利用这个漏洞随意升级固件。 <*链接：http://archives.neohapsis.com/archives/bugtraq/2002-07/0137.html http://www.pingtel.com/doc
CVSS Information
N/A
Vulnerability Type
N/A