Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration…
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Yealink
- Product
- T3XW Series Phones, T4X Series Phones, T5X Series Phones
- CVSS v3.1
- 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- Weakness
- CWE-863
- Exposure class
- Collaboration
- NVD status
- Received
Why it ranks 14 (Routine)
- CVSS v3.1 4.3 medium
- Product class: collaboration
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.