CVE-2021-27561 Yealink Device Management
Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2021-11-17
- Ransomware use
- not known