CVE-2025-68644: CVE-2025-68644: sahtecilikle kimlik doğrulama atlatma

Açıklama (NVD)

Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses. This was fixed by deploying an enhanced authentication mechanism through a security update to all cloud instances.

Özet bilgiler

CVSS v3.1

7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

%0,30 (yüzdelik 23)

CWE

CWE-290

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.yealink.com
• www.yealink.com
• CWE-290