Vulnerabilities > Yeahlink

DATE CVE VULNERABILITY TITLE RISK
2019-10-08 CVE-2019-14657 Path Traversal vulnerability in Yeahlink T49G Firmware, T58V Firmware and Vp59 Firmware
Yealink phones through 2019-08-04 have an issue with OpenVPN file upload.
network
low complexity
yeahlink CWE-22
critical
 9.0
9.0
2019-10-08 CVE-2019-14656 Unrestricted Upload of File with Dangerous Type vulnerability in Yeahlink T49G Firmware, T58V Firmware and Vp59 Firmware
Yealink phones through 2019-08-04 do not properly check user roles in POST requests.
network
low complexity
yeahlink CWE-434
critical
 9.0
9.0