Lucene search
+L

391 matches found

Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•25 views

PT-2024-24195 · Yealink · Yealink Vp59 Microsoft Teams Phone

Name of the Vulnerable Software and Affected Versions: Yealink VP59 Microsoft Teams Phone versions 91.15.0.118 through 122.15.0.141 Description: An issue allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option. Recommendations: For Yealink VP59 Microsoft...

2.1CVSS6.5AI score0.0031EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/29 12:00 a.m.•106 views

CVE-2024-31747

The Yealink VP59 Microsoft Teams Phone is vulnerable in firmware versions 91.15.0.118 through 122.15.0.141 . A physically proximate attacker can disable the device's phone lock by accessing the Walkie Talkie menu option . To resolve this issue, users should update the firmware to version 122.15.0...

2.1CVSS6.7AI score0.0031EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/04/25 7:15 p.m.•14 views

CVE-2024-30939

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

6.8CVSS5.8AI score0.00372EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/25 7:15 p.m.•34 views

CVE-2024-30939

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

6.8CVSS6.8AI score0.00372EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/04/25 12:00 a.m.•17 views

Yealink VP59 安全漏洞

YeaLink VP59 is a flagship smart video phone from China-based YeaLink. A security vulnerability exists in the Yealink VP59 Teams Editions version 91.15.0.118, which stems from a flaw that allows an attacker to take control of an account via the factory reset process...

6.8CVSS6.8AI score0.00372EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/25 12:00 a.m.•17 views

PT-2024-23683 · Yealink · Yealink Vp59 Teams Editions

Name of the Vulnerable Software and Affected Versions: Yealink VP59 Teams Editions version 91.15.0.118 Description: An issue in the factory reset procedure of Yealink VP59 Teams Editions allows a physically proximate attacker to gain control of an account. Recommendations: For Yealink VP59 Teams...

6.8CVSS6.9AI score0.00372EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/04/25 12:00 a.m.•11 views

CVE-2024-30939

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

7.1AI score0.00372EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/25 12:00 a.m.•91 views

CVE-2024-30939

The Yealink VP59 Teams Editions with firmware version 91.15.0.118 is vulnerable to an account takeover due to a flaw in the factory reset procedure . A physically proximate attacker can exploit this issue to gain control of an account. As a remediation, it is recommended to perform a secure reset...

6.8CVSS7.1AI score0.00372EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/04/25 12:00 a.m.•40 views

CVE-2024-30939

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

7AI score0.00372EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•3 views

CVE-2024-30939: Improper Authentication

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

6.8CVSS5.8AI score0.00372EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/26 8:15 p.m.•16 views

CVE-2024-28442

Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company portal component...

7.5CVSS5.8AI score0.00844EPSS
SaveExploits1References2
NVD
NVD
•added 2024/03/26 8:15 p.m.•34 views

CVE-2024-28442

Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company portal component...

7.5CVSS6AI score0.00844EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/03/26 12:00 a.m.•27 views

CVE-2024-28442

Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company portal component...

6.3AI score0.00844EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/03/26 12:00 a.m.•44 views

CVE-2024-28442

Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company portal component...

6.2AI score0.00844EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/03/26 12:00 a.m.•25 views

PT-2024-22438 · Yealink · Yealink Vp59

Name of the Vulnerable Software and Affected Versions: Yealink VP59 version 91.15.0.118 Description: A Directory Traversal issue allows a physically proximate attacker to obtain sensitive information via the terms of use function in the company portal component. Recommendations: For Yealink VP59...

7.5CVSS6AI score0.00844EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/26 12:00 a.m.•4 views

CVE-2024-28442: Exposure of Sensitive Information to an Unauthorized Actor

Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company portal component...

7.5CVSS5.9AI score0.00844EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/03/26 12:00 a.m.•18 views

YeaLink VP59 安全漏洞

YeaLink VP59 is a flagship smart video phone from China YeaLink YeaLink. A security vulnerability exists in YeaLink VP59 version v.91.15.0.118, which originates from a vulnerability that allows an attacker to gain access to sensitive information via the terms of use feature in the company portal...

7.5CVSS6.6AI score0.00844EPSS
SaveExploits1References3
CVE
CVE
•added 2024/03/26 12:00 a.m.•111 views

CVE-2024-28442

The Yealink VP59 smart video phone, specifically version v.91.15.0.118 , is susceptible to a Directory Traversal vulnerability. This flaw exists within the terms of use function in the company portal component , which allows a physically proximate attacker to obtain sensitive information. To miti...

7.5CVSS6.2AI score0.00844EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2024/02/23 11:15 p.m.•17 views

CVE-2024-24681

An issue was discovered in Yealink Configuration Encrypt Tool AES version and Yealink Configuration Encrypt Tool RSA version before 1.2. There is a single hardcoded key used to encrypt provisioning documents across customers' installations...

9.8CVSS5.8AI score0.01025EPSS
SaveExploits1References3
NVD
NVD
•added 2024/02/23 11:15 p.m.•27 views

CVE-2024-24681

An issue was discovered in Yealink Configuration Encrypt Tool AES version and Yealink Configuration Encrypt Tool RSA version before 1.2. There is a single hardcoded key used to encrypt provisioning documents across customers' installations...

9.8CVSS6.5AI score0.01025EPSS
SaveExploits1References3
Rows per page
Query Builder