Device Management vulnerabilities
1 known vulnerability in Device Management from Yealink. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Yealink Device Management Server-Side Request Forgery (SSRF) Exploited
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.