Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Vulnerability Type
授权机制不正确
Vulnerability Title
Yealink YMCS 安全漏洞
Vulnerability Description
Yealink YMCS是中国亿联（Yealink）公司的一个云管理服务，用于集中管理和维护Yealink的设备。 Yealink YMCS 2025-05-26之前版本存在安全漏洞，该漏洞源于未阻止冻结企业账户访问OpenAPI，可能导致未经授权的访问。
CVSS Information
N/A
Vulnerability Type
N/A