10 matches found
CVE-2025-66737
Yealink T21PE2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component...
CVE-2025-66737
Yealink T21PE2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component...
CVE-2025-66738
An issue in Yealink T21PE2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component...
CVE-2025-66737
Yealink T21PE2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component...
CVE-2025-66738: Improper Neutralization of Special Elements used in a Command
An issue in Yealink T21PE2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component...
CVE-2025-66737
Yealink T21PE2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component...
CVE-2025-66738
The Yealink T21P_E2 Phone (version 52.84.0.15 ) is vulnerable to arbitrary code execution due to a flaw in the ping function of the diagnostic component . A remote attacker with normal privileges can exploit this by sending a specially crafted request (specifically a POST request ) via the web in...
Yealink T21P_E2 安全漏洞
Yealink T21PE2 is an IP phone from China Yealink Yealink. A security vulnerability exists in Yealink T21PE2 version 52.84.0.15, which stems from a flaw in the ping function of the diagnostic component, and could lead to the execution of arbitrary code by a remote attacker...
CVE-2025-66737: Relative Path Traversal
Yealink T21PE2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component...
