CVE

CVE-2021-27561

Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability

Yealink · Device Management

Date added (CISA)

2021-11-03

Remediation due

2021-11-17

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution.