CVE-2025-68644

High CVSS: 7.4

Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses. This was fixed by deploying an enhanced authentication mechanism through a security update to all cloud instances.

Vendor

Product

CWE

CWE-290

Yayın Tarihi

2025-12-21 04:16:05

Güncelleme

2025-12-23 14:51:52

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-290 HIGH 2025

Referanslar

https://www.yealink.com/en/trust-center/security-bulletins/yealink-unauthorized-access-to-rps-vulnerability https://www.yealink.com/website-service/download/Yealink_RPS_Security_Remediation_Verification_Report.pdf