Brute-Force Vulnerability in Yealink YMCS RPS Products
CVE-2025-52916
Currently unrated
What is CVE-2025-52916?
The Yealink YMCS RPS prior to June 4, 2025, has a vulnerability that permits brute-force enumeration due to inadequate limits on SN verification attempts. This flaw could allow attackers to enumerate the last five digits of the serial number, potentially leading to unauthorized access or exploitation of the system.