CVE record · 1 source
CVE-2026-122124
CVSS 6.1On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface.
- Vendor
- Yealink
- Product
- UVC40 E2
- CVSS v3.1
- 6.1 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weakness
- CWE-669
- Exposure class
- Collaboration
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface.
On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface. Sensitive data within the firmware configuration can be abused to gain root…