CVE-2023-43959

2023-10-1700:00:00

mitre

www.cve.org

yealinksip-t19p-e2

remote code execution

crafted request

ping function

privileged attacker

cve-2023-43959

AI Score

8.8

Confidence

High

EPSS

0.009

Percentile

83.5%

JSON

An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component.

References

hackmd.io/%40tahaafarooq/auth_rce_voip

www.exploit-db.com/exploits/50509