PT-2025-49545
CVE-2025-14228
·
Published
2025-12-08
·
Updated
2026-10-07
Description by
CVSS 2.0
4.0
MediumMetricsAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Yealink SIP-T21P E2 version 52.84.0.15
Description
A flaw exists in the Local Directory Page component of the software that allows for cross-site scripting. The issue can be triggered remotely. The exploit is publicly available. The vendor was informed of the issue but did not provide a response. This vulnerability affects products that are no longer supported.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾