Vulnerability Details CVE-2025-66737
Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.1%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2025-66737
-
cpe:2.3:h:yealink:sip-t21(p)e2:-
-
cpe:2.3:o:yealink:sip-t21(p)e2_firmware:52.84.0.15