CVE-2024-48353

Katalog CVE

CVSS 7.5 · High EPSS 0,38%

Kerentanan Insecure Storage of Sensitive Information pada yealink meeting server. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS file and decrypt the plaintext passwords based on the obtained key information.

Rincian

Terbit di NVD

1 November 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-922: Insecure Storage of Sensitive Information

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 29,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.yealink.com/en/trust-center/security-advisories/b1998ab629254ca3 advisory vendor