What’s Vulnerable › Vulnerabilities

CVE-2022-47732

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-01-20 · updated 2026-06-17
• Weakness: CWE-916

Description

In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device.

Affected products

• Yeastar N412 Firmware: all versions
• Yeastar N824 Firmware: all versions

References

• https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/
• https://www.yeastar.com/n-series-analog-phone-system/
• https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/
• https://www.yeastar.com/n-series-analog-phone-system/

Get alerted when CVE-2022-47732 or the next vulnerability affects your stack