Yealink Ultra-elegant Ip Phone Sip-t41p Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Yealink Ultra-elegant Ip Phone Sip-t41p Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-16217 — CVSS 8.8 (high): The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated…
• CVE-2018-16218 — CVSS 8.8 (high): A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware version 66.83.0.35 allows…
• CVE-2018-16221 — CVSS 8.0 (high): The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) does not validate (escape) the path…