CVE-2002-0674: Pingtel Xpressa

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication.

Affected products

• Pingtel Xpressa: version 1.2.5 only; version 1.2.7.4 only

Published 2002-07-23. Last modified 2026-06-16.