high8.8
CVE-2019-14657
Yealink phones through 2019-08-04 have an issue with OpenVPN file upload.
Impact
Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitrary code execution as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yeahlink | Vp59 Firmware | through 2019-08-04 |
| Yeahlink | T49g Firmware | through 2019-08-04 |
| Yeahlink | T58v Firmware | through 2019-08-04 |