Read the docs

Yealink

Records43All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

Yealink records in CISA KEV
TI-2021-09018 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Sip-t38g 4 records MEDIUM Ultra-elegant Ip Phone Sip-t41p Firmware 3 records MEDIUM Vp59 Firmware 3 records HIGH Yealink Meeting Server 3 records MEDIUM Configuration Encryption Tool 2 records MEDIUM Sip-t21(p)e2 Firmware 2 records HIGH Voip Phone Firmware 2 records LOW Device Management 1 record CRITICAL

Records

4 records in Sip-t38g · all components

TI-2013-04895 CVE-2013-5758 · GHSA-m4jr-2x8w-p434

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to…

Priority MEDIUM 53

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.11892 Published 2014-08-03 No fix listed CWE-78
TI-2013-04892 CVE-2013-5755 · GHSA-gp77-cphr-2x6x

config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user…

Priority MEDIUM 50

config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admin account, and (3) var (jhl3iZAe./qXM) for the var account, w…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04337 Published 2014-07-16 No fix listed CWE-255
TI-2013-04894 CVE-2013-5757 · GHSA-vv8p-q8m8-pw8m

Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote…

Priority LOW 24

Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the dumpConfigFile function in the command parameter to cgi-bin/cgiSer…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02754 Published 2014-08-03 No fix listed CWE-22
Open these records in search →