Lucene search
HistoryOct 17, 2023 - 2:15 p.m.
CVE-2023-43959
yealinksip-t19p-e2
cve-2023-43959
remote code execution
nvd
security issue
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.6%
An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component.
Affected configurations
Node
yealinksip-t19p-e2Match-
yealinksip-t19p-e2_firmwareMatch53.84.0.15
| CPE | Name | Operator | Version |
|---|---|---|---|
| yealink:sip-t19p-e2_firmware | yealink sip-t19p-e2 firmware | eq | 53.84.0.15 |
Related
prion
prion
Design/Logic Flaw
2023-10-17 14:15:00
nvd
nvd
CVE-2023-43959
2023-10-17 14:15:09
cvelist
cvelist
CVE-2023-43959
2023-10-17 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.6%
Related for CVE-2023-43959