CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Voip_phone_firmware | Yealink | 28.72.0.2 (including) | 28.72.0.2 (including) |