PatchTheCVEyealink meeting server vulnerabilities and fixes
Recent CVEs affecting yealink meeting server, with upgrade or downgrade steps. 2 tracked.
Also searched as: yealinkmeetingserver.
yealink meeting server has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-11-01. Highest priority: CVE-2024-48352 (score 42/100).
- CVE-2024-48352 HIGH 7.5 UPGRADE Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via s
- CVE-2024-48353 HIGH 7.5 UPGRADE Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS
FAQ
How do I fix yealink meeting server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yealink meeting server being exploited right now?
None of the tracked yealink meeting server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yealink meeting server CVE should I patch first?
CVE-2024-48352 currently ranks highest (42/100): Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via s.