Yealink Sip-t21(p)e2 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Yealink Sip-t21(p)e2 Firmware: 2 record(s), with affected versions and fixes.
cpe:2.3:o:yealink:sip-t21(p)e2_firmware

CVE-2025-66737 Medium · 4.3 CWE-23 Dec 26, 2025

Relative Path Traversal in Yealink Sip-t21(p)e2 Firmware

Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.

CVE-2025-66738 High · 8.8 CWE-77 Dec 26, 2025

Command Injection in Yealink Sip-t21(p)e2 Firmware

An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component.