CVE-2022-48625

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary...

CVE-2022-48625

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary...

CVE-2022-48625

The Yealink Config Encrypt Tool versions prior to 1.2 contain a built-in RSA key pair, creating a design flaw where an adversary may be able to decrypt configuration files. Specifically, the tool may allow for the decryption of Autop deployment files due to the use of this default key. To mitigat...