Yealink

Records43All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Yealink records in CISA KEV

Products in the NVD configurations · select one to filter the records

2 records in Configuration Encryption Tool · all components

TI-2024-16216 CVE-2024-24681 · GHSA-gfq7-h592-v3xj

MEDIUM 44

An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA version before 1.2).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01025 Published 2024-02-23 No fix listed CWE-798

TI-2022-24157 CVE-2022-48625 · GHSA-cr3p-h54g-qj4w

LOW 39

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00444 Published 2024-02-19 No fix listed CWE-321