Yealink Device Management Platform Unauthorized RCE Vulnerability

Founded in 2001, Yealink is a high-tech company in China, headquartered in the national software industrialization base in Xiazhou. An unauthorized RCE vulnerability in the Yealink Device Management Platform can be exploited to execute arbitrary commands...

Yealink Device Management Platform Unauthorized RCE Vulnerability (CNVD-2021-14827)

Founded in 2001, Yealink is a high-tech company in China, headquartered in the national software industrialization base in Xiazhou. An unauthorized RCE vulnerability in Yealink Device Management Platform can be exploited to execute arbitrary commands...

PT-2021-5058

Name of the Vulnerable Software and Affected Versions Yealink Device Management version 3.6.0.20 Description The issue is related to a lack of input data sanitization in the Yealink Device Management platform, allowing a remote attacker to execute arbitrary commands as the root user. Specifically...

CVE-2019-14656

Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account with a password of user can make admin requests via HTTP...

CVE-2019-14657

Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...

CVE-2019-14657

Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...

CVE-2019-14656

Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account with a password of user can make admin requests via HTTP...

Design/Logic Flaw

Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account with a password of user can make admin requests via HTTP...

Design/Logic Flaw

Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...

CVE-2019-14657

Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...

CVE-2019-14657

CVE-2019-14657 affects Yealink phones (through 2019-08-04) featuring an OpenVPN file upload where tar is executed as root to extract files without validating the extraction directory. An attacker can craft a tar containing ../../../../ to traverse directories and replace almost any file on the de...

CVE-2019-14656

Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account with a password of user can make admin requests via HTTP...

CVE-2019-14656

Summary: CVE-2019-14656 affects Yealink phones through 2019-08-04. The issue stems from inadequate role checks in POST requests, enabling the default User account (password: user) to issue admin requests over HTTP. It has high impact per CVSS metrics (network access, low privileges required, UI/N...

CVE-2019-14656: Unrestricted Upload of File with Dangerous Type

Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account with a password of user can make admin requests via HTTP...

PT-2019-13761

Name of the Vulnerable Software and Affected Versions Yealink phones versions prior to 2019-08-04 Description The issue concerns improper checking of user roles in POST requests. This allows the default User account, which has a password of user, to make admin requests via HTTP. Recommendations F...

PT-2019-13762

Name of the Vulnerable Software and Affected Versions Yealink phones versions prior to 2019-08-04 Description The issue is related to OpenVPN file upload in Yealink phones. It executes tar as root to extract files but does not validate the extraction directory. An attacker can create a tar file...

CVE-2019-14657: Improper Limitation of a Pathname to a Restricted Directory

Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...

The vulnerability of the web interface of the SIP phone Yealink SIP-T21P E2, related to insufficient access control checks, allows a perpetrator to gain access to configuration files.

The vulnerability of the web interface of the SIP phone Yealink SIP-T21P E2 is related to insufficient verification of access rights. Exploiting this vulnerability can allow an attacker to gain access to configuration files through a specially crafted GET request...

VulnCheck KEV: CVE-2013-5758

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files...

Yealink Yeahlink Ultra-elegant IP Phone SIP-T41P Command Injection Vulnerability

Yealink Yeahlink Ultra-elegant IP Phone SIP-T41P is an IP phone from China Yealink. A command injection vulnerability exists in the network diagnostic feature of the Yealink Yeahlink Ultra-elegant IP Phone SIP-T41P using firmware version 66.83.0.35. The vulnerability arises from a network system ...