CVE-2021-27561
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.
CVSS 3.1 · 9.8 Critical
EPSS 83.6%
KEV · Listed
Vendors
Products