CVE-2025-52918 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

Yealink YMCS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.

Reserved 2025-06-21 | Published 2025-06-21 | Updated 2025-06-21 | Assigner mitre

MEDIUM: 5.0CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Problem types

CWE-863 Incorrect Authorization

Product status

Default status

unaffected

Any version before 2025-05-26

affected

References

www.yealink.com/...nter/security-advisories/1318c5efb82e4526

support.yealink.com/...edge/show?id=646b44278ef325311f38303f

cve.org (CVE-2025-52918)

nvd.nist.gov (CVE-2025-52918)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-52918

Support options

Helpdesk Chat, Email, Knowledgebase