PT-2023-8334 · Yealink · Yealink Meeting Server

Publicado 2023-11-24 · Atualizado 2023-11-24

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Yealink Meeting Server (affected versions not specified)

Description The issue exists due to the failure to neutralize special elements used in an operating system command. This could allow a remote attacker to execute arbitrary commands with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

BDU:2024-00482

Produtos afetados

Yealink Meeting Server

Referências · 2

• https://yealink.com/en/trust-center/security-advisories/2f2b990211c440cf · Nota
• https://bdu.fstec.ru/vul/2024-00482 · Nota de Segurança