CVE-2025-66737

Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2025-12-26

Last modified

2026-10-13

Weaknesses

CWE-23

Affected products

• Sip-t21(p)e2 Firmware (Yealink)

References

• https://drive.google.com/file/d/1MpxnCL4koKupqWWDmY3ljlybjIPD8ieD/view?usp=sharing