Yealink

Records43All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Yealink records in CISA KEV

TI-2021-09018 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Sip-t38g 4 records MEDIUM Ultra-elegant Ip Phone Sip-t41p Firmware 3 records MEDIUM Vp59 Firmware 3 records HIGH Yealink Meeting Server 3 records MEDIUM Configuration Encryption Tool 2 records MEDIUM Sip-t21(p)e2 Firmware 2 records HIGH Voip Phone Firmware 2 records LOW Device Management 1 record CRITICAL

Records

2 records in Sip-t21(p)e2 Firmware · all components

TI-2025-41051 CVE-2025-66738 · GHSA-x2hf-qg23-rjpx

An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker…

HIGH 73

An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.006 Published 2025-12-26 No fix listed CWE-77

TI-2025-41050 CVE-2025-66737 · GHSA-8cpr-48rw-5rrc

Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal.

MEDIUM 53

Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00661 Published 2025-12-26 No fix listed CWE-23

Open these records in search →

Critical	8
High	16
Medium	15
Low	4
No CVSS	0