Skip to content
OpenAdvisories
Medium ICSA-25-219-08 4 CVEs

Yealink IP Phones and RPS (Redirect and Provisioning Service)

Published Aug 7, 2025 · Updated Aug 7, 2025

Vendor: Yealink Product: CP960 Product: RPS (Redirect and Provisioning Service) Product: SIP- T48S Product: SIP-CP920 Product: SIP-T19P_E2 Product: SIP-T20P Product: SIP-T21P E2 Product: SIP-T22P Product: SIP-T23G Product: SIP-T26P Product: SIP-T27G Product: SIP-T27P Product: SIP-T29G Product: SIP-T40G Product: SIP-T40P Product: SIP-T41P Product: SIP-T41S Product: SIP-T42G Product: SIP-T42S Product: SIP-T46G Product: SIP-T46S Product: SIP-T48G Product: SIP-T53 Product: SIP-T53W Product: SIP-T54W Product: SIP-T56A Product: SIP-T57W Product: SIP-T58 Product: T52S +3 more

Summary

Successful exploitation of these vulnerabilities could result in an information disclosure.

Vulnerabilities 4

  • Medium 5.0
    CVE-2025-52918

    Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized acce…

    Yealink RPS
  • Medium 4.3
    CVE-2025-52917

    The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive re…

    Yealink RPS
  • Medium 4.3
    CVE-2025-52919

    In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, poten…

    Yealink RPS
  • Low 2.2
    CVE-2025-52916

    Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits).

    Yealink RPS

Revision history

  1. #1

    Initial Publication

References