Yealink Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined	9
IP Phone Software	8

Produkt

Yealink SIP-T38G	4
Yealink Phone	2
Yealink VP59 Teams Edition	1
Yealink VP59	1
Yealink Configuration Encrypt Tool	1

Przeciwdziałanie

Official Fix	2
Temporary Fix	0
Workaround	0
Unavailable	1
Not Defined	14

Wykorzystywanie

High	2
Functional	0
Proof-of-Concept	5
Unproven	0
Not Defined	10

Wektor dostępu

Not Defined	0
Physical	2
Local	0
Adjacent	5
Network	10

Uwierzytelnianie

Not Defined	0
High	0
Low	13
None	4

Interakcja z użytkownikiem

Not Defined	0
Required	2
None	15

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	2
≤4	2
≤5	4
≤6	3
≤7	0
≤8	4
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	2
≤5	4
≤6	3
≤7	0
≤8	4
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	2
≤4	2
≤5	4
≤6	3
≤7	3
≤8	1
≤9	2
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	3
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	5
<2k	6
<5k	6
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	16
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (13): Config Encrypt Tool add RSA (1), Configuration Encrypt Tool (1), Device Management (1), Ip Phone Sip-t21p (1), Meeting Server (1), Phone (2), SIP-T19P-E2 (1), SIP-T38G (4), VP59 (1), VP59 Teams Edition (1), VoIP Phone (1), Voip Phone (1), W60B (1)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2024-04-25	4.1	4.1	Yealink VP59 Teams Edition Factory Reset Local Privilege Escalation	Nieznany	Not Defined	Not Defined	0.00000	0.43	CVE-2024-30939
2024-03-26	2.1	2.1	Yealink VP59 Company Portal directory traversal	Nieznany	Not Defined	Not Defined	0.00043	0.00	CVE-2024-28442
2024-02-21	2.6	2.5	Yealink Configuration Encrypt Tool weak encryption	Nieznany	Not Defined	Not Defined	0.00043	0.03	CVE-2024-24681
2024-02-20	3.5	3.4	Yealink Config Encrypt Tool add RSA weak encryption	Nieznany	Not Defined	Official Fix	0.00043	0.04	CVE-2022-48625
2024-02-08	5.5	5.3	Yealink Meeting Server File Upload Interface privilege escalation	Nieznany	Not Defined	Official Fix	0.00043	0.04	CVE-2024-24091
2023-10-17	7.5	7.2	Yealink SIP-T19P-E2 Diagnostic ping privilege escalation	IP Phone Software	Proof-of-Concept	Not Defined	0.00790	0.02	CVE-2023-43959
2023-08-23	5.5	5.5	Yealink W60B File Upload Interface directory traversal	Nieznany	Not Defined	Not Defined	0.00090	0.08	CVE-2020-24113
2021-10-15	8.8	8.8	Yealink Device Management services privilege escalation	Nieznany	High	Not Defined	0.97444	0.04	CVE-2021-27561
2019-10-08	7.5	7.5	Yealink Phone OpenVPN File Upload directory traversal	Nieznany	Not Defined	Not Defined	0.00225	0.04	CVE-2019-14657
2019-10-08	7.5	7.5	Yealink Phone HTTP Service privilege escalation	Nieznany	Not Defined	Not Defined	0.00165	0.02	CVE-2019-14656

7 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 7 results.

◂ PoprzedniPrzeglądKolejny ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!