In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is…
In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Yealink
- Product
- AVHub, UVC86, SmartVision 80
- CVSS v3.1
- 7.4 AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
- Weakness
- CWE-334
- Exposure class
- Collaboration
- NVD status
- Received
Why it ranks 30 (Notable)
- CVSS v3.1 7.4 high
- Product class: collaboration
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.