Directory Traversal Vulnerability in Yealink VoIP Phone SIP-T38G
CVE-2013-5756

Currently unrated

Key Information:

Vendor

Yealink

Status
Vendor
CVE Published:
3 August 2014

What is CVE-2013-5756?

A directory traversal vulnerability exists in Yealink VoIP Phone SIP-T38G, allowing remote authenticated users to exploit the system by manipulating parameters within URLs. This flaw enables attackers to access arbitrary files on the server, potentially exposing sensitive information. The vulnerability arises from improper handling of user-supplied input in the page parameter, permitting traversal up the directory structure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

EPSS Score

8% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.