Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Yealink Component: Sip-t38g Clear all filters
TI-2013-04895 CVE-2013-5758 · GHSA-m4jr-2x8w-p434

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to…

Priority MEDIUM 53

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.11892 Published 2014-08-03 No fix listed CWE-78
TI-2013-04894 CVE-2013-5757 · GHSA-vv8p-q8m8-pw8m

Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote…

Priority LOW 24

Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the dumpConfigFile function in the command parameter to cgi-bin/cgiSer…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02754 Published 2014-08-03 No fix listed CWE-22
TI-2013-04892 CVE-2013-5755 · GHSA-gp77-cphr-2x6x

config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user…

Priority MEDIUM 50

config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admin account, and (3) var (jhl3iZAe./qXM) for the var account, w…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04337 Published 2014-07-16 No fix listed CWE-255