Login Request a demo
VP
Product
Voip Phone Firmware
by Yealink · last CVE Jul 16, 2014
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities2Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Voip Phone Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-3427
–
5%
Jul 16
CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks…
Affected: 28.72.0.2
CVE-2014-3428
–
2%
Jun 16
Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to…
Affected: 28.72.0.2
Showing 2