CVE-2024-31747

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-31747
An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142) allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option.

2.1 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 0.7 / Impact : 1.4

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://medium.com/%40deepsahu1/yealink-vp59-microsoft-teams-phone-lock-bypass-b7fee9dd9c8c Third Party Advisory Exploit Permissions Required
https://medium.com/%40deepsahu1/yealink-vp59-microsoft-teams-phone-lock-bypass-b7fee9dd9c8c Third Party Advisory Exploit Permissions Required
Configurations

Configuration 1 (hide)

cpe:2.3:o:yealink:vp59_firmware:*:*:*:*:*:*:*:*
History

30 Jul 2025, 00:22

Type Values Removed Values Added
CPE cpe:2.3:o:yealink:vp59_firmware:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://medium.com/%40deepsahu1/yealink-vp59-microsoft-teams-phone-lock-bypass-b7fee9dd9c8c - () https://medium.com/%40deepsahu1/yealink-vp59-microsoft-teams-phone-lock-bypass-b7fee9dd9c8c - Third Party Advisory, Exploit, Permissions Required
First Time Yealink
Yealink vp59 Firmware
Information

Published : 2024-04-29 19:15

Updated : 2025-07-30 00:22

NVD link : CVE-2024-31747

Mitre link : CVE-2024-31747

CVE.ORG link : CVE-2024-31747

JSON object : View

Products Affected

yealink

  • vp59_firmware
CWE
NVD-CWE-noinfo