Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Yealink Component: Ultra-elegant Ip Phone Sip-t41p Firmware Clear all filters
TI-2018-11611 CVE-2018-16221 · GHSA-qpg6-9qg9-qpwr

The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware…

Priority LOW 38

The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) does not validate (escape) the path information (path traversal), which allows an authenticated remote attacker to get a…

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01471 Published 2019-05-29 No fix listed CWE-22
TI-2018-11608 CVE-2018-16218 · GHSA-55v8-f5wg-rq69

A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP…

Priority MEDIUM 41

A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware version 66.83.0.35 allows a remote attacker to trigger code execution or settings modification on the devi…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0126 Published 2019-05-29 No fix listed CWE-352
TI-2018-11607 CVE-2018-16217 · GHSA-fq45-h78c-mjvh

The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P…

Priority MEDIUM 44

The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03255 Published 2019-05-29 No fix listed CWE-78