Executive Summary

This vulnerability exists in the Yealink SIP-T46U device, specifically in the Firmware Chunk Upload handler component. It involves the function mod_upgrade.SparePartsUpload within the file /api/upgrade/accupgradebychunk. The issue arises from manipulation of the argument 'uid', which leads to a stack-based buffer overflow. This means that an attacker can cause the device to overwrite parts of its memory, potentially leading to unexpected behavior or control over the device.

The attack can only be initiated from within the local network, limiting its exposure to remote attackers. The vulnerability has been publicly disclosed, and the vendor did not respond to the disclosure.

Useful 0 Not Useful 0

Impact Analysis

Exploitation of this vulnerability can lead to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code, cause a denial of service, or gain elevated privileges on the affected device.

Since the vulnerability affects confidentiality, integrity, and availability (as indicated by the CVSS scores), an attacker could potentially compromise sensitive communications, disrupt phone services, or take control of the device.

However, the attack requires local network access, so the risk is limited to attackers who have access to the same network as the device.

Useful 0 Not Useful 0