Yeastar

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-47732 1Yeastar 2N412 Firmware N824 Firmware Jun 17, 2026 Jan 20, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, other...Show more In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device.Show less
CVE-2021-27328 1Yeastar 1Neogate Tg400 Firmware Jul 9, 2026 Feb 19, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-47732

1Yeastar

2N412 Firmware

N824 Firmware

Jun 17, 2026

Jan 20, 2023

N/A· v4

7.5 HIGH· v3

N/A· v2

In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device.Show less

CVE-2021-27328

1Yeastar

1Neogate Tg400 Firmware

Jul 9, 2026

Feb 19, 2021

N/A· v4

6.5 MEDIUM· v3

4.0 MEDIUM· v2

Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key.