Yealink MeetingBoard Pro web interface bypass allows screenshots
An administrator on the same network can secretly capture the meeting screen.
Summary
The web management module of Yealink MeetingBoard Pro has a front-end validation bypass. An attacker on the local network with a valid administrator account can trigger the screenshot function.
Affected when
- Valid administrator account on the local network
- Versions before 331.320.0.64
What to do
Update to version 331.320.0.64 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen