← All advisories

High severity7.5NVD Advisory· Published Feb 20, 2024· Updated Jun 17, 2026

CVE-2022-48625

CVE-2022-48625

Description

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Yealink/Configuration Encryption Tool
cpe:2.3:a:yealink:configuration_encryption_tool:*:*:*:*:rsa:*:*:*
Range: <1.2
Yealink/Config Encrypt Tool add RSAcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.2

Patches

Vulnerability mechanics

References

1

www.yealink.com/en/trust-center/security-advisories/yealink-config-encrypt-tool-hardcoded-encryption-password-vulnerabilitynvdVendor Advisory

News mentions

0

No linked articles in our index yet.