One of our regional reps was at our office today and informed me of this vulnerability with yealink phones. said so far there isnt a fix for it.

here is an article I found

https://www.bvoip.com/blog/whoops-yealink-redirection-service-major-security-flaws-exposed

Thanks

Is this still an ongoing vulnerability with the Yealink phones

My research found that it's the UcaaS provider that's not setting the phones up probably, not the phones themselves.

They changed the RPS so that it won't work again after the phone connects to the service the first time unless you reset the MAC in the Yealink site. It's an extra step if you want to factory reset the phone.