CVE-2026-122124 · Infrastructure
NO FIX YET · SEE WHAT TO DO
Yealink UVC40 E2 video conferencing devices before firmware 319.410.0.71 leak Wi-Fi credentials and sensitive firmware configuration over the USB interface. An attacker with brief physical access can use that data to gain root on the device and, within Wi-Fi range, eavesdrop on audio and video without an LED alert.
first public Nov 4, 2026 · 1 source
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Organizations running Yealink UVC40 E2 video conferencing devices with firmware before 319.410.0.71. The risk depends on physical access to the USB interface and Wi-Fi range of the device, so units in locked or non-public rooms carry less exposure. unknown whether the sources describe a default configuration.
Not affected if firmware-319.410.0.71-or-later, no-public-physical-access, no-wifi-configured
Who cares firmware, uvc40-e2, video-conferencing, wifi, yealink
319.410.0.71.319.410.0.71 or later.On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface. Sensitive data within the firmware configuration can be abused to gain root privileges on the device. Within Wi‑Fi coverage, the attacker may perform audio and video eavesdropping with no LED alert from the device.
This page as .md · .json · in your agent: get_signal("CVE-2026-122124") · CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.