Directory Traversal Flaw in Yealink W60B VoIP Phone
CVE-2020-24113

9.1CRITICAL

Key Information:

Vendor

Yealink

Status
W60b Firmware
Vendor
CVE Published:
22 August 2023

What is CVE-2020-24113?

The Yealink W60B VoIP phone is affected by a directory traversal vulnerability in its Contacts File Upload Interface. This flaw allows attackers to exploit the system, gaining unauthorized access to sensitive files and potentially leading to a denial of service event. Users of the affected version are urged to take necessary precautions to mitigate the risks associated with this vulnerability.

References

https://fuo.fi/CVE-2020-24113/

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.