CVE-2025-52919 MEDIUM

CVE-2025-52919

Vendor Yealink

Product RPS

Weakness CWE-295

Published June 21, 2025

Last update July 28, 2025

View on NVD All CVEs

CVSS base score

4.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.

Key dates

02Disclosure timeline

June 21, 2025 CVE published

July 28, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-52919 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/295.html

Related vulnerabilities

04Related CVE

CVE-2026-5787 CVE-2026-42011 Gnutls: gnutls: security bypass due to incorrect name constraint handling CVE-2026-45175 Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes CVE-2026-42012 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans CVE-2026-48247 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php