Unrated severityNVD Advisory· Published Mar 26, 2024· Updated Aug 5, 2024

CVE-2024-28442

Description

Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company portal component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yealink/VP59description
Yealink/VP59llm-fuzzy
Range: = 91.15.0.118

Patches

Vulnerability mechanics

References

medium.com/%40deepsahu1/cve-2024-28442-yealink-ip-phone-webview-escape-leads-to-sensitive-file-disclosure-via-directory-686ef8f80227mitre
www.yealink.com/en/product-detail/ip-phone-vp59mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000