CVE-2025-66738

Publication date

2025-12-26 00:00:00

Family

mitre

State

PUBLISHED

Description

An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component.