CVE-2002-1935

Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar.

Scoring

CVSS base score
0.03
EPSS probability
0.63%
Published
2005-06-28
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs