Sip T33G
Monthly
Race condition in Yealink SIP-T33G firmware versions 124.86.x.x allows authenticated network users to abort active diagnostic operations by exploiting unsynchronized access to predictable output file paths. An attacker with low-level device credentials triggers a diagnostic tool such as ping or traceroute, then concurrently invokes the file deletion endpoint to remove the output file while it is being written, interrupting the running process and leaving the device in an inconsistent state. No public exploit has been identified and no active exploitation is recorded; the vendor has released a fix in firmware 124.87.0.0.
Race condition in Yealink SIP-T33G firmware versions 124.86.x.x allows authenticated network users to abort active diagnostic operations by exploiting unsynchronized access to predictable output file paths. An attacker with low-level device credentials triggers a diagnostic tool such as ping or traceroute, then concurrently invokes the file deletion endpoint to remove the output file while it is being written, interrupting the running process and leaving the device in an inconsistent state. No public exploit has been identified and no active exploitation is recorded; the vendor has released a fix in firmware 124.87.0.0.