CVE-2002-0674: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive adminis...

Security readout for executives and security teams

This is a legacy VoIP phone administration weakness. Pingtel xpressa phones may leave an administrator session active indefinitely, so another user could make administrator-level changes if the admin walks away without logging out. Exposure is likely limited to organizations still operating legacy Pingtel xpressa phones in the named version range, especially where admin interfaces are shared, physically accessible, or reachable by multiple internal users. Prioritize as legacy asset cleanup, not an emergency, unless these phones still manage business-critical voice services or expose admin access broadly. Mitigation focus: Inventory for Pingtel xpressa phones running versions 1.2.5 through 1.2.7.4.; Check the vendor advisory or support history for upgrade or configuration guidance.; Restrict access to phone administration interfaces to trusted administrators only..

Prepared

Jun 30, 2026, 04:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.