Brute-Force Vulnerability in Yealink YMCS RPS Products

CVE-2025-52916

What is CVE-2025-52916?

The Yealink YMCS RPS prior to June 4, 2025, has a vulnerability that permits brute-force enumeration due to inadequate limits on SN verification attempts. This flaw could allow attackers to enumerate the last five digits of the serial number, potentially leading to unauthorized access or exploitation of the system.

References