Lucene search

K
cvelistMitreCVELIST:CVE-2014-3427
HistoryJul 16, 2014 - 2:00 p.m.

CVE-2014-3427

2014-07-1614:00:00
mitre
www.cve.org
5

AI Score

7

Confidence

Low

EPSS

0.035

Percentile

91.6%

CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet.

AI Score

7

Confidence

Low

EPSS

0.035

Percentile

91.6%