Medium · 6.8 CVE-2024-30939 EUVD-2024-28857GHSA-fmpc-xp2h-4h2w

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control…

Published Apr 25, 2024 · Updated Sep 6, 2024 · Assigned by mitre

Description

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure.

References

https://medium.com/%40deepsahu1/yealink-ip-phone-account-take-over-9bf9e7b847c0?source=friends_link&sk=b0d664dd5b3aad5b758e4934aca997ad