Vulnerabilities

TI-2014-02758 CVE-2014-3427 · GHSA-37fc-4qqv-26w3

CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote…

LOW 31

CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05197 Published 2014-07-16 No fix listed

TI-2014-02759 CVE-2014-3428 · GHSA-f334-mrv2-rrrr

Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2…

LOW 24

Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to servlet.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01854 Published 2014-06-16 No fix listed CWE-79

Vulnerabilities

Filters

CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote…

Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2…