← Back

Device Management

device_management

Vendor: Yealink • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-27561
1Yealink
1Device Management
Nov 10, 2025
Oct 15, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.