CyberSec.Space Logo
返回 CVE 浏览器

CVE-2021-27561

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score73.6050%
EPSS Percentile95.53th
Published2021-10-15
Last Modified2025-11-10
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.

Affected Platforms (CPE)

📦
Yealink

Device Management

<= 3.6.0.20

References & Advisories

🔗 https://ssd-disclosure.com/?p=4688
🔗 https://ssd-disclosure.com/?p=4688
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27561

相关漏洞威胁

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

CVE-2026-133096.8

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows ...

CVE-2026-133088.1

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote...

CVE-2026-133076.8

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows p...