Lucene search
PRIOn knowledge basePRION:CVE-2021-27561HistoryOct 15, 2021 - 6:15 p.m.
Command injection
2021-10-1518:15:00
PRIOn knowledge base
www.prio-n.com
6
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| device_management | le | 3.6.0.20 |
References
Related
nessus
nessus
attackerkb
attackerkb
CVE-2021-27561
2021-10-15 00:00:00
nuclei
nuclei
YeaLink DM 3.6.0.20 - Remote Command Injection
2021-08-02 12:55:13
cvelist
cvelist
CVE-2021-27561
2021-10-15 17:11:45
nvd
nvd
CVE-2021-27561
2021-10-15 18:15:07
checkpoint_advisories
checkpoint_advisories
Yealink Device Management Command Injection (CVE-2021-27561)
2021-12-02 00:00:00
cisa_kev
cisa_kev
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
2021-11-03 00:00:00
cve
cve
CVE-2021-27561
2021-10-15 18:15:07
malwarebytes
malwarebytes
threatpost
threatpost
Latest Mirai Variant Targets SonicWall, D-Link and IoT Devices
2021-03-16 16:57:46
thn
thn
New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild
2021-03-16 10:32:00