CVE-2014-3428 in VoIP Phone
Summary
Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to servlet.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
05/07/2014
Disclosure
06/16/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70054 | Yealink VoIP Phone cross site scripting | 79 | Not defined | Not defined | CVE-2014-3428 |