Yealink · Sandworm Watch

Nov 3, 2021high

CVE-2021-27561: Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability

Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution. Required action: Apply updates per vendor instructions.

CVE-2021-27561EPSS 82.5%Device ManagementYealink

CISA KEV ↗ · unattributed attribution