CVE-2018-16218

The CVE-2018-16218 entry concerns a CSRF vulnerability in the web interface of the Yealink Ultra-elegant IP Phone SIP-T41P firmware 66.83.0.35. The issue allows a remote attacker to trigger code execution or settings modification by sending a crafted link to the victim. The root cause is a CSRF w...