Read the docs

Yealink

Records43All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

Yealink records in CISA KEV
TI-2021-09018 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Sip-t38g 4 records MEDIUM Ultra-elegant Ip Phone Sip-t41p Firmware 3 records MEDIUM Vp59 Firmware 3 records HIGH Yealink Meeting Server 3 records MEDIUM Configuration Encryption Tool 2 records MEDIUM Sip-t21(p)e2 Firmware 2 records HIGH Voip Phone Firmware 2 records LOW Device Management 1 record CRITICAL

Records

3 records in Ultra-elegant Ip Phone Sip-t41p Firmware · all components

TI-2018-11607 CVE-2018-16217 · GHSA-fq45-h78c-mjvh

The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P…

Priority MEDIUM 44

The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03255 Published 2019-05-29 No fix listed CWE-78
TI-2018-11608 CVE-2018-16218 · GHSA-55v8-f5wg-rq69

A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP…

Priority MEDIUM 41

A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware version 66.83.0.35 allows a remote attacker to trigger code execution or settings modification on the devi…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0126 Published 2019-05-29 No fix listed CWE-352
TI-2018-11611 CVE-2018-16221 · GHSA-qpg6-9qg9-qpwr

The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware…

Priority LOW 38

The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) does not validate (escape) the path information (path traversal), which allows an authenticated remote attacker to get a…

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01471 Published 2019-05-29 No fix listed CWE-22
Open these records in search →