CVE-2022-48625: Yealink Configuration Encryption Tool

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary.

Affected products

• Yealink Configuration Encryption Tool: before 1.2 (fixed in 1.2)

Published 2024-02-20. Last modified 2026-06-17.