Information Disclosure Vulnerability in Yealink Meeting Server

CVE-2024-48353

What is CVE-2024-48353?

The Yealink Meeting Server prior to version V26.0.0.67 contains a vulnerability that enables unauthorized attackers to access sensitive static key information from a front-end JavaScript file. This exposure potentially allows the decryption of plaintext passwords using the compromised key information, posing significant security threats to user data and system integrity. The vulnerability emphasizes the importance of updating to the latest version and actively monitoring security advisories to safeguard against such exploits.

References