CVE-2024-48352

—

CVSS 3.1

7.5 high

EPSS

<1%p40

Published

Nov 1, 2024 (Nov 1, 2024)

Modified

Jul 5, 2026

Description

Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.

Vendors: yealink
Products: yealink meeting server
Weakness: CWE-922
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.