Vulnerabilities (CVE)

Filtered by vendor Yealink Subscribe
Filtered by product Device Management
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-27561 1 Yealink 1 Device Management 2024-11-21 10.0 HIGH 9.8 CRITICAL
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.