CVE-2025-68644 | THREATINT

Description

Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses. This was fixed by deploying an enhanced authentication mechanism through a security update to all cloud instances.

PUBLISHED Reserved 2025-12-21 | Published 2025-12-21 | Updated 2025-12-21 | Assigner mitre

HIGH: 7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Problem types

CWE-290 Authentication Bypass by Spoofing

Product status

Default status

unaffected

Any version before 2025-06-27

affected

References

www.yealink.com/...-unauthorized-access-to-rps-vulnerability

www.yealink.com/...urity_Remediation_Verification_Report.pdf

cve.org (CVE-2025-68644)

nvd.nist.gov (CVE-2025-68644)

Download JSON