Yeahlink / Vp59 Firmware

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2019-14657	Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directo…	HIGH	8.8	Oct 8, 2019
CVE-2019-14656	Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account (with a password of user) can make…	HIGH	8.8	Oct 8, 2019

Rows per page

Showing 1 to 2 of 2 CVEs