Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00509
Percentile: 0.65362

CVSS Scoring

Mapped CWE(s)

• CWE-494 : Download of Code Without Integrity Check

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1195.002 : Compromise Software Supply Chain
  Kill Chain: initial-access
• T1072 : Software Deployment Tools
  Kill Chain: execution
• T1195.001 : Compromise Software Dependencies and Development Tools
  Kill Chain: initial-access
• T1072 : Software Deployment Tools
  Kill Chain: execution
• T1185 : Browser Session Hijacking
  Kill Chain: collection
• T1195.001 : Compromise Software Dependencies and Development Tools
  Kill Chain: initial-access
• T1195.002 : Compromise Software Supply Chain
  Kill Chain: initial-access
• T1195.001 : Compromise Software Dependencies and Development Tools
  Kill Chain: initial-access

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:o:pingtel:xpressa_firmware:1.2.5:*:*:*:*:*:*:*
• cpe:2.3:o:pingtel:xpressa_firmware:1.2.7.4:*:*:*:*:*:*:*

← Back to Home