Yealink
20 CVEs across 35 Yealink products. Browse Yealink vulnerabilities, severities, and proof-of-concept exploits.
Yealink products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-12223 | Medium | 5.5 | 2026-06-15 | A vulnerability was identified in Yealink SIP-T46U 108.86.0.118. Affected by this vulnerability is the function mod_webd.TFTPUploadIperf of the file /api/inner… |
CVE-2026-12222 | High | 8.0 | 2026-06-15 | A vulnerability was determined in Yealink SIP-T46U 108.86.0.118. Affected is the function mod_webd.BlueToothTest of the file /api/inner/bttest of the component… |
CVE-2026-12221 | High | 8.0 | 2026-06-15 | A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the file /api/upgrade/upgrade of the component Firmware Chunk… |
CVE-2026-12220 | High | 8.0 | 2026-06-15 | A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function mod_upgrade.SparePartsUpload of the file /api/upgrade/accupgradebych… |
CVE-2026-12219 | Medium | 6.3 | 2026-06-15 | A flaw has been found in Yealink SIP-T46U 108.86.0.118. The impacted element is the function mod_diagnose.CommandShellByType of the file /api/diagnosis/start o… |
CVE-2026-12218 | High | 8.0 | 2026-06-15 | A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/inner/beforewifitest… |
CVE-2026-1735 | Medium | 4.3 | 2026-02-02 | A weakness has been identified in Yealink MeetingBar A30 133.321.0.3. This issue affects some unknown processing of the component Diagnostic Handler. This mani… |
CVE-2025-66737 | Medium | 4.3 | 2025-12-26 | Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request resul… |
CVE-2025-66738 | High | 8.8 | 2025-12-26 | An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of th… |
CVE-2025-68644 | High | 7.4 | 2025-12-21 | Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses. This was fixed by deploying an enhanced authentication… |
CVE-2025-14228 | Low | 3.5 | 2025-12-08 | A weakness has been identified in Yealink SIP-T21P E2 52.84.0.15. Impacted is an unknown function of the component Local Directory Page. This manipulation caus… |
CVE-2025-52919 | Medium | 4.3 | 2025-06-21 | In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potentially allowing invalid certificates to… |
CVE-2025-52918 | Medium | 5.0 | 2025-06-21 | Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces. |
CVE-2025-52917 | Medium | 4.3 | 2025-06-21 | The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests. |
CVE-2025-52916 | Low | 2.2 | 2025-06-21 | Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits). |
CVE-2024-48353 | High | 7.5 | 2024-11-01 | Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS file and decrypt the plaintext passwords based o… |
CVE-2024-48352 | High | 7.5 | 2024-11-01 | Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID. |
CVE-2024-33109 | Critical | 9.9 | 2024-09-19 | Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via t… |
CVE-2024-31747 | Low | 2.1 | 2024-04-29 | An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142) allows a physically proximate attacker to disable the phone lock vi… |
CVE-2024-30939 | Medium | 6.8 | 2024-04-25 | An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a… |
CVE-2024-28442 | High | 7.5 | 2024-03-26 | Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use functio… |
CVE-2024-24681 | Critical | 9.8 | 2024-02-23 | An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA version before 1.2). There is a single… |
CVE-2022-48625 | High | 7.5 | 2024-02-20 | Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary. |
CVE-2024-24091 | Critical | 9.8 | 2024-02-08 | Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface. |
CVE-2023-43959 | High | 8.8 | 2023-10-17 | An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagno… |
CVE-2020-24113 | Critical | 9.1 | 2023-08-22 | Directory Traversal vulnerability in Contacts File Upload Interface in Yealink W60B version 77.83.0.85, allows attackers to gain sensitive information and caus… |
CVE-2021-27561 | Critical | 9.8 | 2021-10-15 | Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. |
CVE-2018-16221 | High | 8.0 | 2019-05-29 | The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) does not validate (escape) the path information (path trave… |
CVE-2018-16218 | High | 8.8 | 2019-05-29 | A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware version 66.83.0.35 allows a remote attacker t… |
CVE-2018-16217 | High | 8.8 | 2019-05-29 | The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated attacker to trigger… |
CVE-2012-1417 | | 2014-09-17 | Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject ar… | |
CVE-2013-5758 | | 2014-08-03 | cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body o… | |
CVE-2013-5757 | | 2014-08-03 | Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the dumpC… | |
CVE-2013-5756 | | 2014-08-03 | Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page param… | |
CVE-2014-3427 | | 2014-07-16 | CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response… | |
CVE-2013-5755 | | 2014-07-16 | config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admi… | |
CVE-2014-3428 | | 2014-06-16 | Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the… |