CVE-2024-48352

HIGH

Yealink Meeting Server <V26.0.0.67 - Info Disclosure

Title source: llm
STIX 2.1

Description

Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0046
EPSS Percentile 64.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-922
Status published
Products (1)
yealink/yealink_meeting_server < 26.0.0.67
Published Nov 01, 2024
Tracked Since Feb 18, 2026