CVE-2023-43959

An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.60% chance of exploitation in the next 30 days, 74th percentile

Published

2023-10-17

Updated

2024-09-16

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/50509

References

• CVE Record
• NVD entry

Related

• CVE-2023-43955
• CVE-2023-43960
• CVE-2023-4395
• CVE-2023-44008
• CVE-2023-43944
• CVE-2023-44012