Unrated severityNVD Advisory· Published Aug 3, 2014· Updated Jun 16, 2026

CVE-2013-5758

Description

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yealink/Sip T38g2 versions
cpe:2.3:h:yealink:sip-t38g:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:yealink:sip-t38g:-:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/127093/Yealink-VoIP-Phone-SIP-T38G-Privilege-Escalation.htmlnvdExploit
packetstormsecurity.com/files/127096/Yealink-VoIP-Phone-SIP-T38G-Remote-Command-Execution.htmlnvdExploit
www.exploit-db.com/exploits/33741nvdExploit
www.exploit-db.com/exploits/33742nvdExploit
www.osvdb.org/108080nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.010
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000