Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up which allows attackers to obtain the MD5 hash of the Admin password MD5 hash of the physical password and other registration information.