Yealink Plug-in Softwares unauthorized file write allows remote code execution
Yealink plug-ins used for company video calls could let attackers hack your PC!
Summary
An unauthorized file write flaw in Yealink Plug-in Softwares lets attackers run code remotely. Under specific scenarios, versions before 2.35.219.0 are affected.
What to do
Check that the installed version is newer than 2.35.219.0, and read Yealink's official advisory.
Products and platforms
CVE IDs
Times
First published
First seen