Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2025-52918
Awaiting Analysis
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-21 Jun, 2025 | 23:15
Updated At-10 Jul, 2025 | 20:15

Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.15.0MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CPE Matches
Weaknesses
CWE IDTypeSource
CWE-863Secondarycve@mitre.org
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://dnip.ch/2025/06/25/yealink-voip-phones-insecurity-by-design/cve@mitre.org
N/A
https://seclists.org/fulldisclosure/2025/Jun/20cve@mitre.org
N/A
https://support.yealink.com/en/portal/knowledge/show?id=646b44278ef325311f38303fcve@mitre.org
N/A
https://www.yealink.com/en/trust-center/security-advisories/1318c5efb82e4526cve@mitre.org
N/A
Change History
0Changes found
Details not found