Vulnerabilities > Yealink > Ultra Elegant IP Phone SIP T41P > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-05-29 CVE-2018-16217 OS Command Injection vulnerability in Yealink Ultra-Elegant IP Phone Sip-T41P Firmware 66.83.0.35
The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection.
network
low complexity
yealink CWE-78
critical
9.0