Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Yealink Subscribe
Filtered by product Device Management
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-27561 1 Yealink 1 Device Management 2021-10-21 10.0 HIGH 9.8 CRITICAL
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.