Description
Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yealink | RPS | < 2025-05-26 | 2025-05-26 |
Advisories 1
- ICSA-25-219-08 Yealink IP Phones and RPS (Redirect and Provisioning Service) CISA ICS & IT advisories · Aug 7, 2025