Lucene search
PRIOn knowledge basePRION:CVE-2014-3427HistoryJul 16, 2014 - 2:19 p.m.
Crlf injection
2014-07-1614:19:00
PRIOn knowledge base
www.prio-n.com
1
7.5 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.038 Low
EPSS
Percentile
91.7%
CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet.
| CPE | Name | Operator | Version |
|---|---|---|---|
| voip_phone_firmware | eq | 28.72.0.2 |
Related
cve
cve
CVE-2014-3427
2014-07-16 14:19:00
securityvulns
securityvulns
Yealink VoIP phones security vulnerabilities
2014-06-13 00:00:00
packetstorm
packetstorm
Yealink VoIP Phones XSS / CRLF Injection
2014-06-13 00:00:00
7.5 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.038 Low
EPSS
Percentile
91.7%
Related for PRION:CVE-2014-3427