What’s Vulnerable › Vulnerabilities

CVE-2024-31747

• Severity: low (CVSS 2.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-04-29 · updated 2026-06-17

Description

An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142) allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option.

Affected products

• Yealink Vp59 Firmware: from 91.15.0.118 before 122.15.0.142 — fixed in 122.15.0.142

How to fix

Upgrade to a fixed version: Yealink Vp59 Firmware 122.15.0.142. Check the vendor advisory for mitigations.

References

• https://medium.com/%40deepsahu1/yealink-vp59-microsoft-teams-phone-lock-bypass-b7fee9dd9c8c
• https://medium.com/%40deepsahu1/yealink-vp59-microsoft-teams-phone-lock-bypass-b7fee9dd9c8c

Get alerted when CVE-2024-31747 or the next vulnerability affects your stack