Yealink SIP-T20P IP Phone Multiple Security Vulnerabilities
28 Jan. 2013
Summary
Yealink SIP-T20P IP Phone is prone to multiple security vulnerabilities including: 1. Multiple security bypass vulnerabilities 2. A buffer-overflow vulnerability 3. A cross-site request-forgery vulnerability.
An attacker can exploit these vulnerabilities to execute arbitrary code or bypass certain security restrictions and perform unauthorized actions. Failed attacks will cause denial-of-service conditions.