Description
An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component.
High · 8.8
CVE-2025-66738
EUVD-2025-205450GHSA-x2hf-qg23-rjpx
An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the…
Published Dec 26, 2025 · Updated Jul 5, 2026 · Assigned by mitre