Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Yealink RPS 2025-05-26 Clear all filters
TI-2025-32953 CVE-2025-52919 · GHSA-h483-pm62-h98h

Improper certificate validation in Yealink RPS

Priority MEDIUM 53

In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00185 Published 2025-06-21 Fixed in 2025-05-26 CWE-295
TI-2025-32952 CVE-2025-52918 · GHSA-pwj2-p9vr-j8jr

Incorrect authorization in Yealink RPS

Priority LOW 23

Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00291 Published 2025-06-21 Fixed in 2025-05-26 CWE-863
TI-2025-32951 CVE-2025-52917 · GHSA-mrw7-q7w8-vj5j

Resource allocation without limits in Yealink RPS

Priority LOW 20

The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00325 Published 2025-06-21 Fixed in 2025-05-26 CWE-770