Description (CNA)
Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses. This was fixed by deploying an enhanced authentication mechanism through a security update to all cloud instances.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Yealink / RPS | affected 0 before 2025-06-27 |
CWE
CWE-290
References
- https://www.yealink.com/en/trust-center/security-bulletins/yealink-unauthorized-access-to-rps-vulnerability
- https://www.yealink.com/website-service/download/Yealink_RPS_Security_Remediation_Verification_Report.pdf
ADP enrichment
No English description supplied.
No references supplied.