Lucene search
HistoryJul 16, 2014 - 2:19 p.m.
CVE-2014-3427
cve-2014-3427
crlf injection
vulnerability
yealink voip phones
firmware 28.72.0.2
http headers
http response splitting
servlet
7.2 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.038 Low
EPSS
Percentile
91.9%
CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yealink:voip_phone_firmware | yealink voip phone firmware | eq | 28.72.0.2 |
Related
prion
prion
Crlf injection
2014-07-16 14:19:00
cvelist
cvelist
CVE-2014-3427
2014-07-16 14:00:00
packetstorm
packetstorm
Yealink VoIP Phones XSS / CRLF Injection
2014-06-13 00:00:00
securityvulns
securityvulns
Yealink VoIP phones security vulnerabilities
2014-06-13 00:00:00
7.2 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.038 Low
EPSS
Percentile
91.9%
Related for CVE-2014-3427