Unrated severityNVD Advisory· Published Oct 8, 2019· Updated Aug 5, 2024
CVE-2019-14656
CVE-2019-14656
Description
Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account (with a password of user) can make admin requests via HTTP.
Affected products
2- Yealink/phonesdescription
Patches
Vulnerability mechanics
References
2- cerebusforensics.com/yealink/exploit.htmlmitrex_refsource_MISC
- sway.office.com/3pCb559LYVuT0eigmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.