cbcvebase.

Yealink Device Management vulnerabilities

1 known vulnerability affecting yealink/device_management.

Total CVEs
1
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2021-27561P1CRITICALCVSS 9.8KEVPoC≤ 3.6.0.202021-10-15
CVE-2021-27561 [CRITICAL] CWE-78 CVE-2021-27561: Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.
nvd
Yealink Device Management vulnerabilities | cvebase