Brand
Yealink: actively exploited vulnerabilities
1 vulnerability in a Yealink product (Device Management) is in CISA’s catalog of exploited vulnerabilities. It was added on November 3, 2021.
-
0 vulnerabilities added in the last 12 months
-
1 exploited vulnerability in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Yealink category to your radar, or open its page.
- Collaboration, telephony and video conferencing 1 vulnerability
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Device Management1 vulnerability, Collaboration and video
Name used by CISA: Yealink. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Yealink list.
- Rank 1
Yealink Device ManagementCVE-2021-27561
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.