← Back

Configuration Encryption Tool

configuration_encryption_tool

Vendor: Yealink • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-24681
1Yealink
1Configuration Encryption Tool
Nov 4, 2025
Feb 23, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA version before 1.2). There is a single hardcoded key (used to encrypt provisioning documents) across...Show more
An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA version before 1.2). There is a single hardcoded key (used to encrypt provisioning documents) across customers' installations.Show less
CVE-2022-48625
1Yealink
1Configuration Encryption Tool
Aug 26, 2025
Feb 20, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary.