CVE-2013-5758

EXPLOITED

Yealink SIP-T38G - Authenticated OS Command Injection via cgiServer.exx System Method

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2013-5758 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including Mr.Un1k0d3r.

AI-analyzed exploit summary This exploit leverages command execution (CVE-2013-5758) to modify system file permissions and escalate privileges by altering the /etc/passwd file, granting root access to the guest account.

Description

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files.

Exploits (2)

exploitdb WORKING POC
by Mr.Un1k0d3r · textremotehardware
https://www.exploit-db.com/exploits/33742

This exploit leverages command execution (CVE-2013-5758) to modify system file permissions and escalate privileges by altering the /etc/passwd file, granting root access to the guest account.

Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Yealink VoIP Phone SIP-T38G
Auth required
Prerequisites: Authentication as admin · Network access to the device
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC
by Mr.Un1k0d3r · textremotehardware
https://www.exploit-db.com/exploits/33741

This exploit demonstrates remote command execution on Yealink VoIP Phone SIP-T38G by sending a crafted POST request to the cgiServer.exx endpoint, leveraging default credentials and the system function to execute arbitrary commands.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Yealink VoIP Phone SIP-T38G
Auth required
Prerequisites: Network access to the target device · Default credentials (admin:admin)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/108080
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/33741
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/33742

Scores

EPSS 0.1174
EPSS Percentile 93.9%

Details

VulnCheck KEV 2019-06-13
CWE
CWE-78
Status published
Products (1)
yealink/sip-t38g
Published Aug 03, 2014
Tracked Since Feb 18, 2026