Vulnerability Details : CVE-2002-0670
The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing.
Exploit prediction scoring system (EPSS) score for CVE-2002-0670
Probability of exploitation activity in the next 30 days: 1.16%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 83 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2002-0670
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2002-0670
Products affected by CVE-2002-0670
- cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*
- cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*