Description
The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yealink | RPS | < 2025-05-26 | 2025-05-26 |
Advisories 1
- ICSA-25-219-08 Yealink IP Phones and RPS (Redirect and Provisioning Service) CISA ICS & IT advisories · Aug 7, 2025