Vulnerabilities (CVE)

Filtered by vendor Yealink Subscribe
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-5757 1 Yealink 1 Sip-t38g 2014-08-04 4.0 MEDIUM N/A
Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the dumpConfigFile function in the command parameter to cgi-bin/cgiServer.exx.
CVE-2013-5756 1 Yealink 1 Sip-t38g 2014-08-04 4.0 MEDIUM N/A
Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to cgi-bin/cgiServer.exx.