CVE-2024-48352: High severity Yealink Yealink Meeting Server vulnerability
Published Nov 1, 2024
·Updated
Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.
Affected Software
1 affected component
Yealink Yealink Meeting Server<26.0.0.67
Event History
Nov 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-48352?
CVE-2024-48352 is rated as a high severity vulnerability due to sensitive data exposure.
2
How do I fix CVE-2024-48352?
To remediate CVE-2024-48352, upgrade the Yealink Meeting Server to version 26.0.0.67 or later.
3
What type of vulnerability is CVE-2024-48352?
CVE-2024-48352 is classified as a sensitive data exposure vulnerability.
4
What systems are affected by CVE-2024-48352?
CVE-2024-48352 affects all versions of the Yealink Meeting Server before 26.0.0.67.
5
Is there any workaround for CVE-2024-48352?
There are no known workarounds for CVE-2024-48352, the best action is to upgrade the software.