Low · 2.2 CVE-2025-52916 EUVD-2025-19547GHSA-w9xp-xgf9-cvcf

Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits).

Published Jun 21, 2025 · Updated Jul 28, 2025 · Assigned by mitre

Vendor: Yealink Product: RPS

Description

Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits).

Affected products

Vendor	Product	Affected	Fixed
Yealink	RPS	< 2025-06-04	2025-06-04

Advisories 1

ICSA-25-219-08 Yealink IP Phones and RPS (Redirect and Provisioning Service) CISA ICS & IT advisories · Aug 7, 2025

References